CVE-2025-0087

In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-0087

CVE-2025-0087 describes a local elevation-of-privilege in Android: in UninstallerActivity.java onCreate, missing permission checks could allow uninstalling another user’s app without user interaction. Several sources (NVD, CNVD/CNNVD, OSV) confirm the issue and classify it as EoP with a CVSSv3.1 ...

CVE-2025-0087

In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Linux Distros Unpatched Vulnerability : CVE-2023-37378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nullsoft Scriptable Install System NSIS before 3.09 mishandles access control for an uninstaller directory. CVE-2023-37378 Note that Nessus relies on the presen...

CVE-2025-50675

GPMAW 14, a bioinformatics software, has a critical vulnerability related to insecure file permissions in its installation directory. The directory is accessible with full read, write, and execute permissions for all users, allowing unprivileged users to manipulate files within the directory,...

Exploit for CVE-2025-50675

CVE-2025-50675 – Insecure Permissions in GPMAW 14.2 Summar...

CVE-2022-24767

GitHub: Git for Windows' uninstaller vulnerable to DLL hijacking when run under the SYSTEM user account...

CVE-2022-36415

A DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4.4.2 before 4.4.3 when installed via the EXE installer. The uninstaller attempts to load DLLs out of a Windows Temp folder. If a standard user places malicious DLLs in the C:\Windows\Temp\ folder, and...

CVE-2021-32928

The Sentinel LDK Run-Time Environment installer Versions 7.6 and prior adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947...

The vulnerability of the functions 0x8001E000() and 0x8001E004() of the system file IUProcessFilter.sys in the IObit Uninstaller uninstaller software allows a hacker to cause a service failure.

The vulnerability of the functions 0x8001E000 and 0x8001E004 of the system file IUProcessFilter.sys in the IObit Uninstaller uninstaller is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the functions 0x8001E000(), 0x8001E00C(), 0x8001E004(), and 0x8001E010() of the system file IURegistryFilter.sys in the IObit Uninstaller uninstaller software allows a malicious actor to cause a service failure.

The vulnerability of the functions 0x8001E000, 0x8001E00C, 0x8001E004, and 0x8001E010 of the system file IURegistryFilter.sys in the IObit Uninstaller uninstaller software is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2020-3432

A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authenticated, local attacker to corrupt the content of any file in the filesystem. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit th...

CVE-2020-3432

A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authenticated, local attacker to corrupt the content of any file in the filesystem. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit th...

CVE-2020-3432 Cisco AnyConnect Secure Mobility Client for Mac OS File Corruption Vulnerability

A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authenticated, local attacker to corrupt the content of any file in the filesystem. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit th...

CVE-2021-37617

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. The Nextcloud Desktop Client invokes its uninstaller script when being installed to make sure there are no remnants of previous installations. In versions 3.0.3 through 3.2.4, the Client searches th...

Trend Micro Worry-Free Business Security (WFBS) Command Execution Vulnerability (000294994)

The remote host is running a version of the Trend Micro WFBS which is affected by a command execution vulnerability in the 3rd party AV uninstaller module contained in Worry-Free Business Security which could allow an attacker to manipulate the module to execute arbitrary commands on an affected...

Trend Micro Apex One Command Execution (000294994)

According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One prior to SP1 Server Build 12380 and Agent Build 12380. It is, therefore, affected by a vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One,...

Veeam Installer Service Displays Previous Version Despite Being Updated

Challenge After upgrading Veeam Backup & Replication, the Veeam Installer Service on other machines managed by Veeam Backup & Replication may be listed in Apps and Features or Programs and Features with a version that does not match Veeam Backup & Replication version. For example, an environment...

CVE-2023-6253

A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file...

Design/Logic Flaw

A saved encryption key in the Uninstaller in Digital Guardian's Agent before version 7.9.4 allows a local attacker to retrieve the uninstall key and remove the software by extracting the uninstaller key from the memory of the uninstaller file...