7434 matches found
CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...
UBUNTU-CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...
CVE-2021-30577
CVE-2021-30577 affects Google Chrome’s Installer component; prior to 92.0.4515.107 there is insufficient policy enforcement, enabling a remote attacker to escalate to local privileges via a crafted file. Remediation: upgrade to 92.0.4515.107 or newer. Exploitation status is not provided in the do...
CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...
CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...
Privilege escalation
An issue was discovered in Comelit "App lejos de casa web" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges installer or administrator for the graphical interface via a...
August 3, 2021, update for Visio 2016 (KB4504718)
None None...
Microsoft Edge Installer Directory Junction Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Edge. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within Edge Installer. By...
Exploit for Classic Buffer Overflow in Hp Color_Laser_150_4Zb94A
What is included? CVE-2021-3438detection v2sccm.ps1 is a...
CVE-2020-18169
A vulnerability in the Windows installer XML WiX toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details...
Design/Logic Flaw
A vulnerability in the Windows installer XML WiX toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to ignore other safety mechanisms provided by the Host OS. See reference document for more details...
CVE-2020-18169
TechSmith Snagit version 19.1.1.2860 is affected by a privilege-escalation issue in the Windows installer XML (WiX) toolset. The vulnerability is described as enabling elevation of privileges via the Snagit installer, with the caveat that exploitation requires the user to bypass other OS safety m...
TechSmith SnagIT 安全漏洞
Techsmith TechSmith SnagIT is a set of screen capture software from Techsmith USA. The software is mainly used to take screenshots and record videos on the screen. A security vulnerability exists in TechSmith Snagit, which stems from a vulnerability in the Windows installer XML WiX toolset in...
PT-2021-10146
Name of the Vulnerable Software and Affected Versions: TechSmith Snagit version 19.1.1.2860 Description: A vulnerability in the Windows installer XML WiX toolset of TechSmith Snagit allows attackers to escalate privileges. The exploitation of the Snagit installer would require the end user to...
Insecure Access Control
chromium is uses an insecure access control. An insufficient policy enforcement in Installer allows an attacker to bypass security restrictions...
Chromium: CVE-2021-30577 Insufficient policy enforcement in Installer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
PT-2021-3742 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in creating connections with directories in the Edge Installer component of Microsoft Edge, allowing an attacker to potentially elevate privileges and...
Google Chrome Installer security bypass vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Installer in versions of Google Chrome prior to 92.0.4515.107. An attacker could exploit this vulnerability to bypass security restrictions...
Google Chrome 权限许可和访问控制问题漏洞
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Installer in versions of Google Chrome prior to 92.0.4515.107. An attacker could exploit this vulnerability to bypass security restrictions...
KLA12236 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface, obtain sensitive information, perform cross-site scripting attack. Below is a complete li...