7406 matches found
Description of the security update for Office 2010: December 10, 2019
Description of the security update for Office 2010: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists in Microsoft Access software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see...
OPENSUSE-SU-2019:2664-1 Security update for opera
This update for opera fixes the following issues: Opera was updated to version 65.0.3467.62 - CHR-7658 Update chromium on desktop-stable-78-3467 to 78.0.3904.108 - DNA-81387 Remove support for old bundle structure in signing scripts - DNA-81675 Update widevine signature localisation in signed...
The vulnerability of the automatic update function of the corporate VPN application GlobalProtect Agent for Windows allows a intruder to increase their privileges.
The vulnerability of the automatic update function of the corporate VPN application, GlobalProtect Agent for Windows, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges by loading the modified MSI installer onto the disk...
Intel® Quartus® Prime Pro Edition Advisory
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00311.html...
The vulnerability of the Windows Installer component allows attackers to exploit their privileges.
The vulnerability of the Windows Installer component in operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Windows Modules Installer Service component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows Modules Installer Service component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2019-2218
In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing permission check. This could lead to local escalation of privilege by installing malicious packages with User execution privileges needed. User interaction is not needed for...
CVE-2019-19364
A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe version 1.1.0.21 and CatalystBrowseSuite.2019.1.exe version 1.1.0.21 installers run. The vulnerability is in the form of DLL Hijacking. The installers try to load DLLs that don’t exist from its current...
The vulnerability of the ActiveX Installer component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the ActiveX Installer component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...
Xunjie CAD Viewing Software installer is vulnerable to dll hijacking
Xunjie CAD viewing software is a CAD drawing viewing tool, can be detached from the AutoCAD environment on the DWG, DXF files for fast browsing. A dll hijacking vulnerability exists in the installation program of Xunjie CAD Viewer. An attacker can exploit the vulnerability to execute arbitrary co...
STAMP Workbench installer may insecurely load Dynamic Link Libraries
Overview STAMP Workbench is a modeling tool for STAMP provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA. It is distirbuted as a ZIP archive or an Windows executable installer. The Windows executable installer contains an issue with the DLL search path, which may lead to insecurely...
STAMP Workbench Installer Code Issue Vulnerability
STAMP Workbench is a modeling tool that supports support for STAMP Systems Theory Accident Models and Processes/STPA Systems Theory Process Analysis. A code issue vulnerability exists in the STAMP Workbench installer that can be exploited by an attacker to cause unsafe loading of dynamic link...
JVN#19386781: STAMP Workbench installer may insecurely load Dynamic Link Libraries
STAMP Workbench is a modeling tool for STAMP provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA. It is distirbuted as a ZIP archive or an Windows executable installer. The Windows executable installer contains an issue with the DLL search path, which may lead to insecurely loading...
CVE-2019-13702
Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable...
UBUNTU-CVE-2019-13702
Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable...
CVE-2019-13702
Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable...
Privilege escalation
Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable...
CVE-2019-13702
CVE-2019-13702 affects Google Chrome on Windows with an insecure installer implementation that allowed privilege escalation via a crafted executable. The vulnerability originates from an inappropriate installer implementation, enabling local attackers to elevate privileges. Public advisories conf...
