141 matches found
CVE-2021-33062: Incorrect Default Permissions
Incorrect default permissions in the software installer for the IntelR VTuneTM Profiler before version 2021.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0064: Incorrect Permission Assignment for Critical Resource
Insecure inherited permissions in the IntelR PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-33089: Undefined Security Weakness
Improper access control in the software installer for the IntelR NUC HDMI Firmware Update Tool for NUC8i3BE, NUC8i5BE, NUC8i7BE before version 1.78.4.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2021-20043
Name of the Vulnerable Software and Affected Versions IntelR NUC HDMI Firmware Update Tool versions prior to 1.78.2.0.7 Description The issue is related to incorrect default permissions in the software installer, which may allow an authenticated user to potentially enable escalation of privilege...
The vulnerability of the software installer for Intel Optane DC Persistent Memory, which allows a hacker to enhance their privileges.
The vulnerability of the software installer for Intel Optane DC Persistent Memory, which operates on non-volatile memory, is related to improper handling of the search path. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2020-11839
Name of the Vulnerable Software and Affected Versions IntelR Wireless BluetoothR software installer versions on Windows 7, 8.1, and 10 Description A race condition in the software installer for some IntelR Wireless BluetoothR products may allow an unprivileged user to potentially enable escalatio...
The vulnerability of the installer of Intel Smart Connect Technology allows a perpetrator to enhance their privileges.
The vulnerability of the Intel Smart Connect Technology software installer is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Input validation
Improper file permission in software installer for IntelR Smart Connect Technology for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-11167
Improper file permission in software installer for IntelR Smart Connect Technology for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-11167
CVE-2019-11167 affects Intel Smart Connect Technology for Intel NUC. Root cause: improper file permissions in the software installer, enabling an authenticated local user to escalate privileges via local access. According to the Intel advisory, the vendor does not provide patches and recommends u...
CVE-2019-11167: Incorrect Permission Assignment for Critical Resource
Improper file permission in software installer for IntelR Smart Connect Technology for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2019-4061
Name of the Vulnerable Software and Affected Versions IntelR Smart Connect Technology affected versions not specified Description The issue is related to improper file permissions in the software installer for IntelR Smart Connect Technology, which may allow an authenticated user to potentially...
Input validation
Improper permissions in the software installer for IntelR Authenticate before 3.8 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-11143
Summary : CVE-2019-11143 affects Intel® Authenticate prior to 3.8 due to improper permissions in the software installer, which could allow an authenticated local user to escalate privileges. Intel specifies updates to 3.8 or later as remediation. Other sources (Red Hat, CNVD, CNVD-derived listing...
CVE-2019-11143: Undefined Security Weakness
Improper permissions in the software installer for IntelR Authenticate before 3.8 may allow an authenticated user to potentially enable escalation of privilege via local access...
JVN#50810870: Installer of Adobe Creative Cloud Desktop Application may insecurely load Dynamic Link Libraries
Installer of Creative Cloud Desktop Application provided by Adobe contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest...
Intel Data Center Migration Center Software software installer DLL injection vulnerability
Intel Data Center Migration Center Software is a set of data center migration software from Intel Corporation in the U.S. The software installer is its installer. A DLL injection vulnerability exists in the software installer in Intel Data Center Migration Center Software 3.1 and earlier versions...
CVE-2018-12160
DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access...
CVE-2018-12160
CVE-2018-12160 is a DLL injection vulnerability in Intel Data Center Migration Center Software installer (v3.1 and earlier). The issue allows an authenticated local user to execute code with default directory permissions due to improper installer permissions. Affected product/versions: Intel Data...
CVE-2018-12160
DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory permissions via local access...