CVE-2022-31694

InstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the installer binary parent directory when displaying popups. This may allow an attacker to plant a malicious DLL in the installer parent directory to allow executing code with the privileges of the installer...

CVE-2022-36924

The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user...

CVE-2022-28768

The Zoom Client for Meetings Installer for macOS Standard and for IT Admin before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root...

CVE-2022-28768

The Zoom Client for Meetings Installer for macOS Standard and for IT Admin before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root...

Privilege escalation

The Zoom Client for Meetings Installer for macOS Standard and for IT Admin before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root...

CVE-2022-36924 Local Privilege Escalation in Zoom Rooms Installer for Windows

The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user...

CVE-2022-36924

Vulnerability summary (CVE-2022-36924) : Zoom Rooms Installer for Windows prior to version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this during the installation process to elevate privileges to SYSTEM. The PT Security entry notes an und...

CVE-2022-28768 Local Privilege Escalation in Zoom Client Installer for macOS

The Zoom Client for Meetings Installer for macOS Standard and for IT Admin before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root...

CVE-2022-28768

The CVE-2022-28768 entry affects Zoom Client for Meetings Installer for macOS prior to version 5.12.6. The root cause is a race condition during the copying of resources in the installer, allowing a local low-privileged user to escalate to root during installation. Affected software: Zoom Client ...

PT-2022-5832 · Zoom · Zoom Rooms Installer For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Rooms Installer for Windows versions prior to 5.12.6 Description: The issue is related to a local privilege escalation. A local low-privileged user could exploit this during the install process to escalate their privileges to the SYSTEM...

BATLOADER- Evasive Malware leverages SEO poisoning

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary "BatLoader" dropper is used to dispense a range of malware tools on victim devices, including a banking Trojan, an information stealer, and the Cobalt Strike post-exploit toolkit. BatLoader malware actor...

rust-coreos-installer bug fix and enhancement update

An update is available for rust-coreos-installer. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

PT-2022-5815 · Zoom · Zoom Client For Meetings Installer For Macos

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings Installer for macOS versions prior to 5.12.6 Description: The issue is related to a local privilege escalation vulnerability. A local low-privileged user could exploit this during the install process to escalate their...

CVE-2022-36384

Unquoted search path in the installer software for some Intelr NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36377

Insecure inherited permissions in some IntelR Wireless Adapter Driver installation software for IntelR NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36384

Unquoted search path in the installer software for some Intelr NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36380

Uncontrolled search path in the installer software for some Intelr NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled search path in the software installer for IntelR System Studio for all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33064

Uncontrolled search path in the software installer for IntelR System Studio for all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33064

Uncontrolled search path in the software installer for IntelR System Studio for all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...