CVE-2020-9290

An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading...

CVE-2020-9287

An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that...

CVE-2020-9290

An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading...

Directory traversal

An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading...

CVE-2020-9287

CVE-2020-9287 refers to an Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and earlier. A local attacker with control over the directory hosting FortiClientEMSOnlineInstaller.exe can achieve arbitrary code execution by placing malicious Filter Library DLLs in that direc...

CVE-2020-9290

Fortinet FortiClient for Windows installers (online installers) 6.2.3 and earlier are affected by an Unsafe Search Path vulnerability (DLL hijacking). FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe could be tricked if an attacker controls the directory where these executable...

CVE-2020-9290

An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading...

Microsoft Windows Language Pack Installer Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Language Pack Installer is one of the language pack installers. A privilege vulnerability...

Microsoft Windows ActiveX Installer Service Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. ActiveX Installer Service is one of the ActiveX installer services. An elevation of...

CVE-2020-0514

Improper default permissions in the installer for IntelR Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0508

Incorrect default permissions in the installer for IntelR Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0515

Uncontrolled search path element in the installer for IntelR Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0508

Incorrect default permissions in the installer for IntelR Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0508

Incorrect default permissions in the installer for IntelR Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper default permissions in the installer for IntelR Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Incorrect default permissions in the installer for IntelR Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0515

Uncontrolled search path element in the installer for IntelR Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0515

CVE-2020-0515 is an Intel Graphics Drivers vulnerability: the installer has an uncontrolled search path element that could allow an authenticated local attacker to escalate privileges. Affected Windows drivers include versions prior to 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, ...

CVE-2020-0514

CVE-2020-0514 affects Intel Graphics Drivers for Windows; root cause is improper default permissions in the installer. Versions affected: before 26.20.100.7463 and 15.45.30.5103. Affected drivers can allow an authenticated local user to escalate privileges. Mitigation: update to the latest Intel ...

CVE-2020-0514

Improper default permissions in the installer for IntelR Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an authenticated user to potentially enable escalation of privilege via local access...