Microsoft Edge (Chromium-Based) Multiple Vulnerabilities-01 (Jun 2023)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

com.sonymobile.jenkins.plugins.lenientshutdown:lenientshutdown (>=1.1.0, <=1.1.1), org.jenkins-ci.main:jenkins-test-harness (1.601) +3 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.601)

org.jenkins-ci.main:jenkins-core MAVEN version 1.601 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonymobile.jenkins.plugins.lenientshutdown:lenientshutdown =1.1.0, =1.0, =1.3 -...

CVE-2023-32016

Windows Installer Information Disclosure Vulnerability...

CVE-2023-32016

Windows Installer Information Disclosure Vulnerability...

CVE-2023-32016

Windows Installer Information Disclosure Vulnerability...

Information disclosure

Windows Installer Information Disclosure Vulnerability...

CVE-2023-32016

Technical details about CVE-2023-32016 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and security feeds for affected products, vulnerable components, and fixes.

CVE-2023-34122

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as this is a duplicate of CVE-2023-36540...

CVE-2023-28603

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

Improper access control

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

CVE-2023-34122

Concerning CVE-2023-34122 (duplicate of CVE-2023-36540), the connected sources provide concrete details for Zoom Desktop Client for Windows before version 5.14.5. The flaw is an untrusted search path in the installer that may allow an authenticated user to escalate privileges via local access. Im...

CVE-2023-28603

CVE-2023-28603 concerns the Zoom VDI client installer, with an improper access control flaw in versions prior to 5.14.0. The vulnerability could allow a malicious user to delete local files without proper permissions. Affected component: Zoom VDI client installer (pre-5.14.0). Root cause: imprope...

A Flaw in Microsoft Visual Studio Installer Enables Malicious Extension Distribution

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary A vulnerability in Microsoft Visual Studio Installer allows attackers to gain unauthorized access, compromise systems, and distribute malicious extensions, posing a significant security risk. To...

Windows Installer Information Disclosure Vulnerability

...

Zoom VDI client installer security vulnerabilities

Zoom VDI client installer is a client installer from Zoom USA. A security vulnerability exists in Zoom VDI client installer versions prior to 5.14.0 that stems from incorrect access control. An attacker can exploit the vulnerability to delete local files without proper privileges...

Microsoft Windows Installer security vulnerabilities

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit this vulnerability to disclose sensitive...

CVE-2023-32016: Use of Uninitialized Resource

Windows Installer Information Disclosure Vulnerability...

CVE-2023-28603: External Control of File Name or Path

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

Zoom Client for Meetings < 5.14.0 Vulnerability (ZSB-23014)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23014 advisory. - Improper input validation in the installer for Zoom for Windows clients before 5.14.0 may allow an authenticated user t...

PT-2023-3126 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Installer component of Windows operating systems. Exploitation of this issue may allow an attacker t...