Xen: double unlock in x86 guest IRQ handling (XSA-458)

An optional feature of PCI MSI called 'Multiple Message' allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go. In this handling an error path could be taken in different situations, with or witho...

China-linked APT17 Targets Italian Companies with 9002 RAT Malware

A China-linked threat actor called APT17 has been observed targeting Italian companies and government entities using a variant of a known malware referred to as 9002 RAT. The two targeted attacks took place on June 24 and July 2, 2024, Italian cybersecurity company TG Soft said in an analysis...

double unlock in x86 guest IRQ handling

ISSUE DESCRIPTION An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go. In this handling an error path could be taken in different...

PT-2024-23794

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns an optional feature of PCI MSI called "Multiple Message" that allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these...

CVE-2024-6689

Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYSTEM...

CVE-2024-6689 Local privilege escalation vulnerability in baramundi Management Agent via MSI Installer

Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYSTEM...

CVE-2024-6689 Local privilege escalation vulnerability in baramundi Management Agent via MSI Installer

Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYSTEM...

CVE-2024-6689

CVE-2024-6689 affects Baramundi Management Agent (MSI installer) on Windows, specifically version 23.1.172.0. The issue is described as a Local Privilege Escalation by an unprivileged local user to SYSTEM. The available Connected documents confirm the affected software/component and the local esc...

Uninstallation of the Citrix License Server Fails with Error 1722

The uninstallation of the Citrix License Server fails and the following error message is displayed: “Product: Citrix Licensing -- Error 1722. There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or...

Error 1603 Occurs When Installing Hotfix Rollup Pack 2 on XenApp 6.0

Error 1603 occurs when installing Hotfix Rollup Pack2 on XenApp 6.0. Troubleshooting Methodology The Technical Support Engineer completedthefollowing steps to resolve the issue: Enabled msi logging and attempted the hotfix rollup pack install again. Error 1603 occurred. Examined the msi logs; the...

Description of the security update for Microsoft OLE DB Driver 19 for SQL Server: July 9, 2024

Description of the security update for Microsoft OLE DB Driver 19 for SQL Server: July 9, 2024 Summary This security update resolves a vulnerability. To learn more about the vulnerability, see the following security advisory: CVE-2024-37334 - Microsoft OLE DB Driver for SQL Server Remote Code...

MSI Installer Flaw Enables Privilege Escalation on Windows Systems

...

SoftMaker Office / FreeOffice Local Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Local Privilege Escalation via MSI installer product: SoftMaker Office / FreeOffice vulnerable version: SoftMaker Office 2024 / NX before revision 1214 FreeOffice 2021...

CVE-2024-37726

Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Center v.2.0.36.0 allows a local attacker to escalate privileges via the Export System Info function in MSI.CentralServer.exe...

Exploit for CVE-2024-37726

CVE-2024-37726 MSI Center Local Privilege Escalation - Arbitra...

CVE-2024-37726

Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Center v.2.0.36.0 allows a local attacker to escalate privileges via the Export System Info function in MSI.CentralServer.exe...

CVE-2024-37726

Insecure Permissions vulnerability in Micro-Star International Co., Ltd MSI Center v.2.0.36.0 allows a local attacker to escalate privileges via the Export System Info function in MSI.CentralServer.exe...

CVE-2024-37726

CVE-2024-37726 overview (MSI Center) : A local privilege-escalation in MSI Center

PT-2024-27723 · Msi · Msi Center

Name of the Vulnerable Software and Affected Versions: MSI Center versions 2.0.36.0 and earlier Description: A local privilege escalation vulnerability has been identified in MSI Center, allowing a low-privileged user to arbitrarily overwrite or delete high-privileged and critical files on a...

Micro-Star International MSI Center Security Breach

Micro-Star International MSI Center is a monitoring and management platform from Micro-Star International China. You can find all your favorite features such as Game Mode or Smart Priority on the Feature Set page. A security vulnerability exists in Micro-Star International MSI Center version...