CVE-2020-25043

The installer of Kaspersky VPN Secure Connection prior to 5.0 was vulnerable to arbitrary file deletion that could allow an attacker to delete any file in the system...

foreman-installer: Candlepin plaintext password disclosure while Satellite update

A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, such as root, to retrieve the Candlepin plaintext password...

September 1, 2020, update for Office 2016 (KB4484251)

None None...

SoMove Permission Error Vulnerability

SoMove is a PC-oriented, user-friendly setup software for a wide range of Schneider Electric motor control devices. A privilege error vulnerability exists in SoMove version 2.8.1 and earlier. An attacker can exploit this vulnerability to elevate privileges at the start of the SoMove installer...

CVE-2020-7527

Incorrect Default Permission vulnerability exists in SoMove V2.8.1 and prior which could cause elevation of privilege and provide full access control to local system users to SoMove component and services when a SoMove installer script is launched...

Default configuration

Incorrect Default Permission vulnerability exists in SoMove V2.8.1 and prior which could cause elevation of privilege and provide full access control to local system users to SoMove component and services when a SoMove installer script is launched...

chromium-browser: Inappropriate implementation in installer

Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem...

Security Vulnerabilities fixed in Thunderbird 68.12 — Mozilla

If Thunderbird is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Service does ensure that updater.exe is signed by Mozilla, the version could have been rolled back...

CVE-2020-7310

Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...

CVE-2020-7310

Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...

Privilege escalation

Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...

CVE-2020-7310

CVE-2020-7310 describes a privilege-escalation flaw in the installer of McAfee Total Protection (MTP) trial before version 4.0.161.1. The issue arises from manipulating symbolic links to redirect McAfee file operations to an unintended file, enabling local users to modify files governed by write-...

Intel Server Board M10JNP2SB Code Issue Vulnerability

Intel Server Board is a server motherboard from Intel Corporation USA. A code issue vulnerability exists in the installer of the RSTe Software RAID Driver for Intel Server Board M10JNP2SB versions prior to 4.7.0.1119. A local attacker could exploit the vulnerability to elevate privileges...

OPENSUSE-SU-2020:1214-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium updated to 84.0.4147.125 boo1175085 CVE-2020-6542: Use after free in ANGLE CVE-2020-6543: Use after free in task scheduling CVE-2020-6544: Use after free in media CVE-2020-6545: Use after free in audio CVE-2020-6546: Inappropriate...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:1206-1 Rating: important References: 1174497 1175044 1175085 Cross-References: CVE-2020-6542 CVE-2020-6543 CVE-2020-6544 CVE-2020-6545 CVE-2020-6546 CVE-2020-6547 CVE-2020-6548 CVE-2020-6549 CVE-2020-6550...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-48258)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Setup is a Windows operating system installation program. An elevation of privileg...

CVE-2020-8687

Uncontrolled search path in the installer for IntelR RSTe Software RAID Driver for the IntelR Server Board M10JNP2SB before version 4.7.0.1119 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0554

Race condition in software installer for some IntelR Wireless BluetoothR products on Windows 7, 8.1 and 10 may allow an unprivileged user to potentially enable escalation of privilege via local access...

Code injection

Uncontrolled search path in the installer for IntelR RSTe Software RAID Driver for the IntelR Server Board M10JNP2SB before version 4.7.0.1119 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0554

Intel’s advisory (CVE-2020-0554) describes a race condition in the software installer for certain Intel Wireless Bluetooth products on Windows 7/8.1/10 that may allow an unprivileged user to escalate privileges locally. Affected products include multiple Intel Wireless Bluetooth adapters (e.g., W...