Intel® Server Configuration Utility Software Installer Advisory

Summary: Potential security vulnerabilities in the Intel® Server Configuration Utility software installer may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25075 Description: Unquoted search...

PT-2023-23935 · Intel · Intel Nuc Kits & Mini Pcs +1

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installation software versions prior to 1.0.10.3 Description: The issue allows an authenticated user to potentially enable escalation of privilege via local...

PT-2023-7212

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description The issue is related to insufficient access control in the Windows Installer, which can be exploited to elevate privileges. An elevation-of-privilege vulnerability allows attackers ...

CVE-2023-34997: Insecure Inherited Permissions

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-25075: Unquoted Search Path or Element

Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

AMD Graphics Driver Data Forgery Issue Vulnerability

AMD Graphics Driver is an integrated graphics driver from Ultraviolet Semiconductor AMD. A security vulnerability in AMD Graphics Driver, which stems from improper signature verification in the RadeonTM RX Vega M graphics driver for Windows, could allow an attacker with administrator privileges t...

PT-2023-19916

Name of the Vulnerable Software and Affected Versions Intel Server Configuration Utility versions prior to 16.0.9 Description The issue is related to an unquoted search path in the installer for some Intel Server Configuration Utility software. This may allow an authenticated user to potentially...

Security Bulletin: The IBM® Engineering Lifecycle Engineering product using IBM SDK, Java Technology Edition Quarterly CPU - Apr 2023 - Includes Oracle April 2023 CPU plus CVE-2023-2597

Summary All applicable Java SE CVEs published by Oracle as part of their April 2023 Critical Patch Update plus CVE-2023-2597. Following IBM® Engineering Lifecycle Engineering products are vulnerable to this attack, it has been addressed in this bulletin: ELM Installer, IBM Engineering Lifecycle...

New Malvertising Campaign Uses Fake Windows News Portal to Distribute Malicious Installers

A new malvertising campaign has been found to employ fake sites that masquerade as legitimate Windows news portal to propagate a malicious installer for a popular system profiling tool called CPU-Z. "This incident is a part of a larger malvertising campaign that targets other utilities like...

Malvertiser copies PC news site to deliver infostealer

The majority of malvertising campaigns delivering malicious utilities that we have tracked so far typically deceive victims with pages that are almost the exact replica of the software vendor being impersonated. For example, we have seen fake websites appearing like the real Webex, AnyDesk or...

Fedora 39 : chromium (2023-0b39dc9302)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0b39dc9302 advisory. update to 118.0.5993.117. Security release for CVE-2023-5472 ---- Update to 118.0.5993.88 ---- Update to 118.0.5993.70. Include following security...

November 7, 2023, update for Outlook 2013 (KB5002514)

November 7, 2023, update for Outlook 2013 KB5002514 This article describes update 5002514 for Microsoft Outlook 2013 that was released on November 7, 2023. Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2013. It doesn't...

NextGen Installer Oracle Fusion Middleware Data Compromise

The vulnerability of the NextGen Installer component of the Oracle Global Lifecycle Management NextGen OUI Framework software platform exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and...

CVE-2023-3893

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...

Zoom Client for Meetings < 5.14.5 Vulnerability (ZSB-23026)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.5. It is, therefore, affected by a vulnerability as referenced in the ZSB-23026 advisory. - Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated use...

Important: Red Hat Bug Fix Advisory: OpenShift Container Platform Assisted Installer version 2.26.1 release

Assisted Installer version 2.26.1 is now available for Red Hat OpenShift Container Platform. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments. This advisory contains the container images...

Google Android elevation of privilege vulnerability (CNVD-2023-98748)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by a lack of privilege checking in the Package Installer. An attacker can exploit this vulnerability to gain elevated privileges...

CVE-2023-3676

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes...

CVE-2016-1203

Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0.8 Build427 and earlier allows a remote unauthenticated attacker to conduct a man-in-the-middle attack. A successful exploitation may result in a malicious file being downloaded...

CVE-2016-1203

Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0.8 Build427 and earlier allows a remote unauthenticated attacker to conduct a man-in-the-middle attack. A successful exploitation may result in a malicious file being downloaded...