JVN#18056666: Installer of MagicConnect Client program may insecurely load Dynamic Link Libraries

Installer of MagicConnect Client program provided by NTT TechnoCross Corporation contains a vulnerability which may lead to insecurely loading Dynamic Link Libraries CWE-427 when a terminal is connected remotely using Remote desktop. Impact Arbitrary code may be executed with the privilege of the...

CVE-2020-4717

A vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create symbolic link permission to write arbitrary file in another protected path during product installation. IBM X-Force ID: 187727...

CVE-2020-4717

CVE-2020-4717 : IBM SPSS Modeler Subscription Installer contains a local vulnerability where a user with create symbolic link permissions can write arbitrary files to protected paths during product installation. The issue is documented in IBM’s bulletin and linked X-Force entry. A remediation is ...

Windows ActiveX Installer Service Information Disclosure Vulnerability

...

Windows Installer Elevation of Privilege Vulnerability

...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. An information disclosure vulnerability exists in the Windows ActiveX Installer Service. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-base...

Microsoft Windows Installer 后置链接漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A backlink vulnerability exists in Microsoft Windows Installer. The following products and editions are affected: Windows 10 Version 18...

PT-2021-2370 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insecure privilege management in the Windows Installer component of the Windows operating system. Exploitation of this issue may allow an attacker to eleva...

Microsoft Windows Update Stack 安装程序安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Windows Update Stack installer. The following products and editions are affected:Windows 10 Version 1803 for 32-bit Systems,Windows 10 Version 1803...

PT-2021-2375 · Microsoft · Windows Activex Installer Service +1

Name of the Vulnerable Software and Affected Versions: Windows ActiveX Installer Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows ActiveX Installer Service component. It allows an attacker to elevate their privileges. The...

The installers of E START products may insecurely load Dynamic Link Libraries

Overview The installers of E START products by GMO INSIGHT Inc. contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries in the folder specified by the TEMP environment variable or where the installer resides CWE-427, CVE-2015-9267, and CVE-2015-9268...

JVN#68418039: The installers of E START products may insecurely load Dynamic Link Libraries

The installers of E START products by GMO INSIGHT Inc. contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries in the folder specified by the TEMP environment variable or where the installer resides CWE-427, CVE-2015-9267, and CVE-2015-9268. Impact...

March 2, 2021, update for Office 2016 (KB4493153)

None None...

CVE-2021-1727

Windows Installer Elevation of Privilege Vulnerability...

CVE-2021-1727

Windows Installer Elevation of Privilege Vulnerability...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

CVE-2021-1727

Windows Installer Elevation of Privilege Vulnerability...

CVE-2021-1727 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2021-1727

CVE-2021-1727 is a Windows Installer elevation-of-privilege vulnerability. CVSS v3.1 vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8 (HIGH). Local access with low privileges and no user interaction, impacting confidentiality, integrity, and availability. Related entries reference Micr...

The vulnerability of the software installer for Intel RealSense™ DCM 3D cameras allows a perpetrator to gain enhanced privileges.

The vulnerability of the software installer for Intel RealSense™ DCM 3D cameras is related to errors in the use of standard resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...