7573 matches found
CVE-2023-34122
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as this is a duplicate of CVE-2023-36540...
CVE-2023-28603
Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...
Improper access control
Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...
CVE-2023-34122
Concerning CVE-2023-34122 (duplicate of CVE-2023-36540), the connected sources provide concrete details for Zoom Desktop Client for Windows before version 5.14.5. The flaw is an untrusted search path in the installer that may allow an authenticated user to escalate privileges via local access. Im...
CVE-2023-28603
CVE-2023-28603 concerns the Zoom VDI client installer, with an improper access control flaw in versions prior to 5.14.0. The vulnerability could allow a malicious user to delete local files without proper permissions. Affected component: Zoom VDI client installer (pre-5.14.0). Root cause: imprope...
A Flaw in Microsoft Visual Studio Installer Enables Malicious Extension Distribution
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary A vulnerability in Microsoft Visual Studio Installer allows attackers to gain unauthorized access, compromise systems, and distribute malicious extensions, posing a significant security risk. To...
Windows Installer Information Disclosure Vulnerability
...
PT-2023-3126 · Microsoft · Windows Installer +1
Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Installer component of Windows operating systems. Exploitation of this issue may allow an attacker t...
Microsoft Windows Installer 安全漏洞
Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit this vulnerability to disclose sensitive...
PT-2023-24692 · Zoom · Zoom
Name of the Vulnerable Software and Affected Versions: Zoom for Windows versions prior to 5.14.0 Description: The issue is related to improper input validation in the installer, which may allow an authenticated user to potentially enable an escalation of privilege via local access. Recommendation...
Zoom VDI client installer 安全漏洞
Zoom VDI client installer is a client installer from Zoom USA. A security vulnerability exists in Zoom VDI client installer versions prior to 5.14.0 that stems from incorrect access control. An attacker can exploit the vulnerability to delete local files without proper privileges...
Zoom Client for Meetings < 5.14.0 Vulnerability (ZSB-23014)
The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23014 advisory. - Improper input validation in the installer for Zoom for Windows clients before 5.14.0 may allow an authenticated user t...
Researchers Uncover Publisher Spoofing Bug in Microsoft Visual Studio Installer
Security researchers have warned about an "easily exploitable" flaw in the Microsoft Visual Studio installer that could be abused by a malicious actor to impersonate a legitimate publisher and distribute malicious extensions. "A threat actor could impersonate a popular publisher and issue a...
Kingsoft Installer of WPS Office 操作系统命令注入漏洞
Kingsoft Installer of WPS Office is an installation and setup program for WPS Office from Kingsoft, a Chinese company. A security vulnerability exists in Kingsoft Installer of WPS Office version 10.8.0.6186. An attacker can exploit the vulnerability to execute arbitrary operating system commands...
openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0124-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0124-1 advisory. - Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via...
CVE-2019-16283
A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution...
CVE-2019-16283
A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution...
CVE-2019-16283
CVE-2019-16283 concerns the HP SoftPaq Installer vulnerability. The issue affects the HP SoftPaq installer component, allowing arbitrary code execution via a vulnerable installer prior to a fixed version. CVSS metrics (local access, low user interaction, high impact) align with a local, low-effor...
