CVE-2025-21373 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-21206

The CVE-2025-21206 issue concerns the Visual Studio installers with an elevation-of-privilege vulnerability. A concrete root cause mentioned in connected PT-2025-6298 is an uncontrolled search path element affecting the Visual Studio Installer, which could allow a local attacker to gain higher pr...

Description of the security update for Excel 2016: February 11, 2025 (KB5002687)

None None...

Visual Studio Installer Elevation of Privilege Vulnerability

...

Windows Installer Elevation of Privilege Vulnerability

...

PT-2025-6682 · Intel · Intel Gpa +1

Name of the Vulnerable Software and Affected Versions: IntelR GPA and IntelR GPA Framework affected versions not specified Description: The issue concerns incorrect default permissions for some software installers, potentially allowing an authenticated user to enable escalation of privilege via...

PT-2025-6298 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Visual Studio installer, which is associated with an uncontrolled search path element. Exploitation of this issu...

PT-2025-6317 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: An elevation-of-privilege issue in Windows Installer allows attackers to affect the system. The estimated number of potentially affected devices worldwide is not specified. There ...

Microsoft Windows Installer 后置链接漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. A backlink vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate...

CVE-2025-21373: Improper Link Resolution Before File Access

Windows Installer Elevation of Privilege Vulnerability...

CVE-2025-21206: Uncontrolled Search Path Element

Visual Studio Installer Elevation of Privilege Vulnerability...

PT-2025-6642 · Intel · Intel Dsa

Name of the Vulnerable Software and Affected Versions: IntelR DSA versions prior to 24.2.19.5 Description: The issue is related to incorrect default permissions for some IntelR DSA installers for Windows, which may allow an authenticated user to potentially enable escalation of privilege via loca...

A week in security (February 3 – February 9)

Last week on Malwarebytes Labs: WhatsApp says Paragon is spying on specific users New AI "agents" could hold people for ransom in 2025 Valley News Live exposed more than a million job seeker’s resumes Small business owners, secure your web shop University site cloned to evade ad detection...

[SECURITY] Fedora 41 Update: rust-coreos-installer-0.23.0-2.fc41

coreos-installer installs Fedora CoreOS or RHEL CoreOS to bare-metal machines or, occasionally, to virtual machines...

University site cloned to evade ad detection distributes fake Cisco installer

There is a constant "cat and mouse" game between defenders and attackers, the latter trying to outsmart and get a head start on the former. In the context of online advertising, this involves creating fake identities or using stolen ones to push out malicious ads. An attacker not only needs to...

CVE-2022-42291

NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked location, which may lead to data tampering. An attacker does not have explicit control over the exploitation of this...

CVE-2022-4956

A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part of the component WinSxS DLL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may ...

CVE-2020-15264

The Boxstarter installer before version 2.13.0 configures C:\ProgramData\Boxstarter to be in the system-wide PATH environment variable. However, this directory is writable by normal, unprivileged users. To exploit the vulnerability, place a DLL in this directory that a privileged service is looki...

CVE-2020-8895

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...

CVE-2024-29187

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to drop and load multiple binaries. Standard users can hijack the binary before it'...