Windows Installer Privilege Escalation

The vulnerability of the Windows Installer component in Windows operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2023-29820

An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819...

CVE-2023-29820

An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819...

CVE-2023-29820

An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819...

Design/Logic Flaw

DISPUTED An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and...

Webroot Secure Anywhere security vulnerabilities

Webroot Secure Anywhere is a comprehensive antivirus program from Webroot USA. A security vulnerability exists in Webroot Secure Anywhere Endpoint Protection CE 23.1 v.9.0.33.39 and prior versions, which originated from a vulnerability that allows local attackers to access sensitive information v...

CVE-2023-29820: Exposure of Resource to Wrong Sphere

An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819...

CVE-2023-29820

CVE-2023-29820 affects Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and earlier. According to Red Hat entries, a local attacker can access sensitive information via the EXE installer, with the vulnerability stemming from (unstated) local-privilege context and exposure during ins...

CVE-2022-43474

Uncontrolled search path for the DSP Builder software installer before version 22.4 for IntelR FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-33963

Incorrect default permissions in the software installer for IntelR UniteR Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-33963

Incorrect default permissions in the software installer for IntelR UniteR Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access...

Default configuration

Incorrect default permissions in the software installer for IntelR UniteR Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22440

The CVE-2023-22440 issue affects Intel® SCS Add-on software installer for Microsoft SCCM (all versions). The root cause is incorrect default permissions, which could allow an authenticated user to escalate privileges via local access. The Intel advisory notes no updates will be released and recom...

CVE-2022-33963

Summary : CVE-2022-33963 affects Intel® Unite® Client software for Windows prior to version 4.2.34870. The root cause is incorrect default permissions in the software installer, which may allow an authenticated user to escalate privileges via local access. Affected components/versions : Intel® Un...

Intel NUC Software Studio Service installer has security vulnerabilities

Intel NUC Software Studio Service installer is an application installer from Intel Corporation USA. A security vulnerability exists in Intel NUC Software Studio Service installer prior to version 1.17.38.0, which stems from the presence of insecure inherited privileges that could allow an...

CVE-2022-33963: Incorrect Default Permissions

Incorrect default permissions in the software installer for IntelR UniteR Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-38103: Insecure Inherited Permissions

Insecure inherited permissions in the IntelR NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-13329 · Intel · Intel Unite Client

Name of the Vulnerable Software and Affected Versions: IntelR UniteR Client software for Windows versions prior to 4.2.34870 Description: The issue is related to incorrect default permissions in the software installer, which may allow an authenticated user to potentially enable escalation of...

PT-2023-14219

Name of the Vulnerable Software and Affected Versions IntelR FPGAs Pro Edition DSP Builder software versions prior to 22.4 Description The issue concerns an uncontrolled search path in the software installer, which may allow an authenticated user to potentially enable escalation of privilege via...

PT-2023-7459 · Microsoft +1 · Sccm +1

Name of the Vulnerable Software and Affected Versions: IntelR SCS Add-on software installer for Microsoft SCCM all versions Description: The issue is related to incorrect default permissions in the IntelR SCS Add-on software installer for Microsoft SCCM, which may allow an authenticated user to...