7449 matches found
CVE-2022-24618
Summary : CVE-2022-24618 affects Heimdal Premium Security (software component Heimdal.Wizard.exe) with insecure permissions on the installer, enabling a local, unprivileged user to elevate to SYSTEM by triggering a MSI repair via the Browse For Folder dialog in C:\Windows\Installer. Affected vers...
CVE-2022-25943
The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is installed...
CVE-2022-25943
The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is installed...
Installer of WPS Office for Windows misconfigures the ACL for the installation directory
Overview Installer of WPS Office for Windows misconfigures the ACL for the installation directory. When WPS Office for Windows is installed, some service program is registered to the OS, which is invoked with some administrative privilege. The installer fails to configure properly the ACL for the...
Trend Micro Password Manager Installer权限提升漏洞
Trend Micro Password Manager Installer is a password manager installer from Trend Micro, Inc. An elevation of privilege vulnerability exists in Trend Micro Password Manager Installer, which can be exploited by attackers to elevate privileges on the affected machine using specially crafted files...
Printix Client 1.3.1106.0 - Privilege Escalation
Exploit Title: Printix Client 1.3.1106.0 - Privilege Escalation Date: 3/2/2022 Exploit Author: Logan Latvala Vendor Homepage: https://printix.net Software Link: https://software.printix.net/client/win/1.3.1106.0/PrintixClientWindows.zip Version: = 1.3.1106.0 Tested on: Windows 7, Windows 8, Windo...
CVE-2022-26319
An installer search patch element vulnerability in Trend Micro Portable Security 3.0 Pro, 3.0 and 2.0 could allow a local attacker to place an arbitrarily generated DLL file in an installer folder to elevate local privileges. Please note: an attacker must first obtain the ability to execute...
CVE-2022-26319
An installer search patch element vulnerability in Trend Micro Portable Security 3.0 Pro, 3.0 and 2.0 could allow a local attacker to place an arbitrarily generated DLL file in an installer folder to elevate local privileges. Please note: an attacker must first obtain the ability to execute...
CVE-2022-26337
Trend Micro Password Manager Consumer installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine...
CVE-2022-26337
Trend Micro Password Manager Consumer installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine...
CVE-2022-26337
The CVE-2022-26337 entry concerns Trend Micro Password Manager (Consumer) installer versions 5.0.0.1262 and earlier. The issue is an Uncontrolled Search Path Element vulnerability in the installer, enabling a local attacker to escalate privileges by using a specially crafted file on the affected ...
CVE-2022-26319
The CVE-2022-26319 entry concerns Trend Micro Portable Security (versions 3.0 Pro, 3.0, and 2.0) and describes an installer search patch element vulnerability that could allow a local attacker to place an arbitrarily generated DLL in an installer folder to achieve local privilege escalation. The ...
CVE-2022-25814
PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...
CVE-2022-25814
The CVE-2022-25814 entry describes a local PendingIntent hijacking flaw in Wearable Manager Installer (Android) prior to Samsung SMR Mar-2022 Release 1. Root cause: hijack of PendingIntent to cause unauthorized actions without permission. Affected component: Wearable Manager Installer. Impact per...
Windows Installer Elevation of Privilege Vulnerability
...
Lenovo Thin Installer 输入验证错误漏洞
Lenovo Thin Installer is an installer from CHN Lenovo Lenovo. for use with Update Retriever to pull driver, software, and system updates from a customized update repository in the cloud or on the network. Lenovo Thin Installer suffers from an input validation error vulnerability that stems from a...
Microsoft Windows Installer 权限许可和访问控制问题漏洞
Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A vulnerability exists in Microsoft Windows Installer due to permission and access control issues. The following products and editions...
Lenovo Thin Installer Denial of Service Vulnerability - Lenovo Support US
No description provided...
CVE-2022-26488
In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabl...
