CVE-2024-27247

Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access...

CVE-2024-27247

Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access...

CVE-2024-24694

Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2024-27247

CVE-2024-27247 describes an issue in the Zoom Desktop Client for macOS installer prior to version 5.17.10 where improper privilege management could allow a privileged local user to escalate privileges. Affected software: Zoom Desktop Client for macOS (pre-5.17.10). Root cause: installer privilege...

CVE-2024-24694 Zoom Desktop Client for Windows - Improper Privilege Management

Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access...

Zoom Client for Meetings < 5.17.10 Vulnerability (ZSB-24011)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.17.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-24011 advisory. - Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an...

PT-2024-21773 · Zoom · Zoom Desktop Client For Macos

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for macOS versions prior to 5.17.10 Description: The issue is related to improper privilege management in the installer, which may allow a privileged user to conduct an escalation of privilege via local access...

CVE-2024-27247: Improper Verification of Cryptographic Signature

Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access...

CVE-2024-24694: Improper Verification of Cryptographic Signature

Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access...

Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...

Zoom Client for Meetings < 5.17.10 Vulnerability (ZSB-24012)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.17.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-24012 advisory. - Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a...

From PDFs to Payload: Bogus Adobe Acrobat Reader Installers Distribute Byakugan Malware

Bogus installers for Adobe Acrobat Reader are being used to distribute a new multi-functional malware dubbed Byakugan. The starting point of the attack is a PDF file written in Portuguese that, when opened, shows a blurred image and asks the victim to click on a link to download the Reader...

CVE-2024-29863

A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 12.70.20300 and May 2023 SR2 12,80.20200 may allow an existing lower privileged user to cause code to be executed in the context of a Windows Administrator...

Qlik Qlikview security vulnerabilities

Qlik QlikView is Qlik's for rapid development and delivery of interactive guided analytics applications and dashboards. A security vulnerability exists in Qlik Qlikview May 2022 SR3 prior to 12.70.20300, and in Qlikview May 2023 SR2 prior to 12,80.20200 versions, which stems from a race condition...

CVE-2024-29863

A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 12.70.20300 and May 2023 SR2 12,80.20200 may allow an existing lower privileged user to cause code to be executed in the context of a Windows Administrator...

CVE-2024-29863

A race condition exists in the Qlik Qlikview installer executable in versions prior to May 2022 SR3 (12.70.20300) and May 2023 SR2 (12.80.20200) . The vulnerability stems from improper synchronization when using a shared resource, specifically during an MSI repair operation. An attacker can explo...

CVE-2024-29863: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 12.70.20300 and May 2023 SR2 12,80.20200 may allow an existing lower privileged user to cause code to be executed in the context of a Windows Administrator...

CVE-2024-31210 PHP file upload bypass via Plugin installer

WordPress is an open publishing platform for the Web. It's possible for a file of a type other than a zip file to be submitted as a new plugin by an administrative user on the Plugins - Add New - Upload Plugin screen in WordPress. If FTP credentials are requested for installation in order to move...

CVE-2024-31210 PHP file upload bypass via Plugin installer

WordPress is an open publishing platform for the Web. It's possible for a file of a type other than a zip file to be submitted as a new plugin by an administrative user on the Plugins - Add New - Upload Plugin screen in WordPress. If FTP credentials are requested for installation in order to move...

WordPress security vulnerabilities

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in WordPress that stems from allowing an attacker to bypass the plugin installe...