Lucene search
+L

7434 matches found

ATTACKERKB
ATTACKERKB
added 2021/08/03 8:15 p.m.5 views

CVE-2021-30577

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...

7.8CVSS6.7AI score0.00952EPSS
SaveExploits1References9
OSV
OSV
added 2021/08/03 8:15 p.m.5 views

UBUNTU-CVE-2021-30577

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...

7.8CVSS7.1AI score0.00952EPSS
SaveExploits1References2
CVE
CVE
added 2021/08/03 7:41 p.m.208 views

CVE-2021-30577

CVE-2021-30577 affects Google Chrome’s Installer component; prior to 92.0.4515.107 there is insufficient policy enforcement, enabling a remote attacker to escalate to local privileges via a crafted file. Remediation: upgrade to 92.0.4515.107 or newer. Exploitation status is not provided in the do...

7.8CVSS7.6AI score0.00952EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
added 2021/08/03 7:41 p.m.32 views

CVE-2021-30577

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...

7.8CVSS8.2AI score0.00952EPSS
SaveExploits1
AlpineLinux
AlpineLinux
added 2021/08/03 7:41 p.m.67 views

CVE-2021-30577

Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...

7.8CVSS7.9AI score0.00952EPSS
SaveExploits1
Prion
Prion
added 2021/08/03 6:15 p.m.24 views

Privilege escalation

An issue was discovered in Comelit "App lejos de casa web" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges installer or administrator for the graphical interface via a...

9CVSS8.7AI score0.01231EPSS
SaveExploits1References1Affected Software1
Microsoft KB
Microsoft KB
added 2021/08/03 12:0 a.m.4 views

August 3, 2021, update for Visio 2016 (KB4504718)

None None...

6.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/08/03 12:0 a.m.36 views

Microsoft Edge Installer Directory Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Edge. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within Edge Installer. By...

7CVSS4.8AI score0.00729EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2021/07/28 9:36 a.m.103 views

Exploit for Classic Buffer Overflow in Hp Color_Laser_150_4Zb94A

What is included? CVE-2021-3438detection v2sccm.ps1 is a...

7.8CVSS7.9AI score0.02926EPSS
SaveExploits1
OSV
OSV
added 2021/07/26 8:15 p.m.11 views

CVE-2020-18169

A vulnerability in the Windows installer XML WiX toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details...

7.8CVSS5.8AI score0.00489EPSS
SaveExploits1References2
Prion
Prion
added 2021/07/26 8:15 p.m.24 views

Design/Logic Flaw

A vulnerability in the Windows installer XML WiX toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details...

4.4CVSS7.9AI score0.00489EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2021/07/26 6:26 p.m.78 views

CVE-2020-18169

TechSmith Snagit version 19.1.1.2860 is affected by a privilege-escalation issue in the Windows installer XML (WiX) toolset. The vulnerability is described as enabling elevation of privileges via the Snagit installer, with the caveat that exploitation requires the user to bypass other OS safety m...

7.8CVSS7.2AI score0.00489EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2021/07/26 12:0 a.m.10 views

TechSmith SnagIT 安全漏洞

Techsmith TechSmith SnagIT is a set of screen capture software from Techsmith USA. The software is mainly used to take screenshots and record videos on the screen. A security vulnerability exists in TechSmith Snagit, which stems from a vulnerability in the Windows installer XML WiX toolset in...

7.8CVSS7.4AI score0.00489EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2021/07/26 12:0 a.m.11 views

PT-2021-10146

Name of the Vulnerable Software and Affected Versions: TechSmith Snagit version 19.1.1.2860 Description: A vulnerability in the Windows installer XML WiX toolset of TechSmith Snagit allows attackers to escalate privileges. The exploitation of the Snagit installer would require the end user to...

7.8CVSS7.3AI score0.00489EPSS
SaveExploits1References10
Veracode
Veracode
added 2021/07/24 4:8 a.m.24 views

Insecure Access Control

chromium is uses an insecure access control. An insufficient policy enforcement in Installer allows an attacker to bypass security restrictions...

7.8CVSS4.3AI score0.00952EPSS
SaveExploits1References9Affected Software2
Microsoft CVE
Microsoft CVE
added 2021/07/22 7:0 a.m.30 views

Chromium: CVE-2021-30577 Insufficient policy enforcement in Installer

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

7.8CVSS8.2AI score0.00952EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2021/07/22 12:0 a.m.6 views

PT-2021-3742 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in creating connections with directories in the Edge Installer component of Microsoft Edge, allowing an attacker to potentially elevate privileges and...

7.8CVSS5.9AI score0.00729EPSS
SaveExploits0References8
CNVD
CNVD
added 2021/07/21 12:0 a.m.22 views

Google Chrome Installer security bypass vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Installer in versions of Google Chrome prior to 92.0.4515.107. An attacker could exploit this vulnerability to bypass security restrictions...

7.8CVSS4.4AI score0.00952EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/07/20 12:0 a.m.7 views

Google Chrome 权限许可和访问控制问题漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Installer in versions of Google Chrome prior to 92.0.4515.107. An attacker could exploit this vulnerability to bypass security restrictions...

7.8CVSS5.7AI score0.00952EPSS
SaveExploits1References12
Kaspersky
Kaspersky
added 2021/07/20 12:0 a.m.333 views

KLA12236 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface, obtain sensitive information, perform cross-site scripting attack. Below is a complete li...

9.6CVSS10AI score0.06282EPSS
SaveExploits28References4
Rows per page
Query Builder