CVE-2002-2361

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing...

Microsoft Windows Installer Service Link Following Information Disclosure Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...

Windows App Installer (Windows SMB Login)

SMB login-based detection of Windows App Installer SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows App Installer Spoofing Vulnerability (May 2025) - Windows

Windows App Installer is prone to a spoofing vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Compromised RVTools Installer Spreading Bumblebee Malware

RVTools installer on its official site was found delivering malware. Research shows it spread Bumblebee loader. Users urged to verify downloads...

RVTools Official Site Hacked to Deliver Bumblebee Malware via Trojanized Installer

The official site for RVTools has been hacked to serve a compromised installer for the popular VMware environment reporting utility. "Robware.net and RVTools.com are currently offline. We are working expeditiously to restore service and appreciate your patience," the company said in a statement...

Malware in solara-installer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2025-29837

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...

Windows Installer Information Disclosure

The vulnerability of Windows operating system installers is related to incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2025-29837

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...

CVE-2025-29837

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...

CVE-2025-29837 Windows Installer Information Disclosure Vulnerability

...

CVE-2025-29837

Technical details about CVE-2025-29837 (affected products, root cause, exploitability) are not publicly disclosed in the provided connected documents; no specifics on impact or remediation are available here.

CVE-2025-29837 Windows Installer Information Disclosure Vulnerability

...

Windows Installer Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...

PT-2025-20952 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Windows Installer. This allows an authorized attacker to disclose informati...

CVE-2025-29837: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...

Microsoft Windows Installer 后置链接漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. A backlink vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to obtain...

SUSE CVE-2025-2759

GStreamer Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of GStreamer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

PT-2025-20059 · Unknown · Package Installer

Name of the Vulnerable Software and Affected Versions: PackageInstallerCN versions prior to 15.0.11.0 Description: The issue is related to the improper handling of insufficient permission in PackageInstallerCN, allowing a local attacker to bypass user interaction for requested installations...