9807 matches found
CVE-2023-32633
Improper input validation in the IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-32633
CVE-2023-32633 concerns Intel® Converged Security Management Engine (CSME) installer: improper input validation before version 2328.5.5.0 may allow an authenticated user to escalate privileges via local access. The issue is documented with affected component as the CSME installer and is tied to l...
CVE-2023-28389
CVE-2023-28389 is an Intel CSME-related issue described in multiple sources. Affected software: Intel® Converged Security Management Engine (CSME) installer software prior to version 2328.5.5.0. Root cause: incorrect default permissions in the installer could allow an authenticated user to escala...
CVE-2023-28389
Incorrect default permissions in some IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-28389: Incorrect Default Permissions
Incorrect default permissions in some IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
Support App Security Vulnerability
Support App is an open source application designed to manage Apple devices. A security vulnerability exists in Support App prior to version 2.5.1 Rev 2, which originates from a security flaw in the installer script that allows the installer to execute arbitrary code as root...
CVE-2023-32633: Improper Input Validation
Improper input validation in the IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-24692
Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access...
CVE-2024-24693
Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access...
Race condition
Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access...
Improper access control
Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access...
CVE-2024-24692
The CVE-2024-24692 entry concerns Zoom Rooms Client for Windows, where a race condition in the installer before version 5.17.5 may allow an authenticated local attacker to cause a denial of service. The issue is tied to the Windows installer process, with impact limited to availability (DOs) and ...
PT-2024-20492 · Zoom · Zoom Rooms Client For Windows
Name of the Vulnerable Software and Affected Versions: Zoom Rooms Client for Windows versions prior to 5.17.5 Description: A race condition in the installer may allow an authenticated user to conduct a denial of service via local access. Recommendations: For versions prior to 5.17.5, update to...
Zoom Rooms Security Breach
Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms Client versions prior to 5.17.5, which stems from a race condition in the...
CVE-2024-24693: Creation of Temporary File in Directory with Insecure Permissions
Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access...
Zoom Rooms Security Breach
Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms Client versions prior to 5.17.5 that stems from improper access control in t...
PT-2024-20493 · Zoom · Zoom Rooms Client For Windows
Name of the Vulnerable Software and Affected Versions: Zoom Rooms Client for Windows versions prior to 5.17.5 Description: The issue is related to improper access control in the installer, which may allow an authenticated user to conduct a denial of service via local access. Recommendations: For...
CVE-2024-21436
Windows Installer Elevation of Privilege Vulnerability...