Design/Logic Flaw

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

Code injection

Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34997

Affected software: Intel Server Configuration Utility (before version 16.0.9). Vulnerability: insecure inherited permissions in the installer, allowing an authenticated user with local access to potentially escalate privileges. Impact: privilege escalation with high impact on confidentiality, int...

CVE-2023-25075

CVE-2023-25075 describes an unquoted search path in the installer of Intel® Server Configuration Utility software pre-16.0.9, which may allow an authenticated local user to escalate privileges. Affected product: Intel Server Configuration Utility installer (before 16.0.9). Remediation: update to ...

CVE-2023-36705

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-36705

Windows Installer Elevation of Privilege Vulnerability...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-36705 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2023-36705

Technical details about CVE-2023-36705 (affected product/component/root cause/impact) are not provided in the connected documents. The supplied materials reference Windows updates and security advisories but do not disclose CVE-specific technical data. Monitor for updates.

Windows Installer Elevation of Privilege Vulnerability

...

Microsoft Windows Installer Security Vulnerability

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to gain elevated privileges...

TYPO3 Security Vulnerabilities

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. A security vulnerability exists in TYPO3 versions prior to 12.4.8, which stems from the login screen of the standalone installation tool displaying the full path to the transient...

PT-2023-23935 · Intel · Intel Nuc Kits & Mini Pcs +1

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installation software versions prior to 1.0.10.3 Description: The issue allows an authenticated user to potentially enable escalation of privilege via local...

Intel® Server Configuration Utility Software Installer Advisory

Summary: Potential security vulnerabilities in the Intel® Server Configuration Utility software installer may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25075 Description: Unquoted search...

AMD Graphics Driver Data Forgery Issue Vulnerability

AMD Graphics Driver is an integrated graphics driver from Ultraviolet Semiconductor AMD. A security vulnerability in AMD Graphics Driver, which stems from improper signature verification in the RadeonTM RX Vega M graphics driver for Windows, could allow an attacker with administrator privileges t...

Security Bulletin: The IBM® Engineering Lifecycle Engineering product using IBM SDK, Java Technology Edition Quarterly CPU - Apr 2023 - Includes Oracle April 2023 CPU plus CVE-2023-2597

Summary All applicable Java SE CVEs published by Oracle as part of their April 2023 Critical Patch Update plus CVE-2023-2597. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed in this bulletin: ELM Installer, IBM Engineering Lifecycle...

New Malvertising Campaign Uses Fake Windows News Portal to Distribute Malicious Installers

A new malvertising campaign has been found to employ fake sites that masquerade as legitimate Windows news portal to propagate a malicious installer for a popular system profiling tool called CPU-Z. "This incident is a part of a larger malvertising campaign that targets other utilities like...

Malvertiser copies PC news site to deliver infostealer

The majority of malvertising campaigns delivering malicious utilities that we have tracked so far typically deceive victims with pages that are almost the exact replica of the software vendor being impersonated. For example, we have seen fake websites appearing like the real Webex, AnyDesk or...

November 7, 2023, update for Outlook 2013 (KB5002514)

November 7, 2023, update for Outlook 2013 KB5002514 This article describes update 5002514 for Microsoft Outlook 2013 that was released on November 7, 2023. Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2013. It doesn't...

Fedora 39 : chromium (2023-0b39dc9302)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0b39dc9302 advisory. update to 118.0.5993.117. Security release for CVE-2023-5472 ---- Update to 118.0.5993.88 ---- Update to 118.0.5993.70. Include following security...