Brave Software: Arbitrary local code execution via DLL hijacking from executable installer

NOTE! Thanks for submitting a report! Please fill all sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty. Summary: The executable installer BraveSetup-ia32.exe is vulnerable to DLL hijacking: it...

CVE-2016-8008

Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus SSP 3.11.376 allows attackers to load a replacement of the version.dll file via McAfee McUICnt.exe onto a Windows system...

CVE-2016-8008

Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus SSP 3.11.376 allows attackers to load a replacement of the version.dll file via McAfee McUICnt.exe onto a Windows system...

PT-2017-9458

Name of the Vulnerable Software and Affected Versions McAfee Security Scan Plus SSP version 3.11.376 Description A privilege escalation issue exists, allowing attackers to load a replacement version.dll file via McAfee McUICnt.exe onto a Windows system. This issue affects Windows 7 and Windows 10...

CVE-2016-8008: Undefined Security Weakness

Privilege escalation vulnerability in Windows 7 and Windows 10 in McAfee Security Scan Plus SSP 3.11.376 allows attackers to load a replacement of the version.dll file via McAfee McUICnt.exe onto a Windows system...

PT-2016-5243

Name of the Vulnerable Software and Affected Versions Huawei Mobile Broadband HL Service versions 22.001.25.00.03 and earlier Description The issue allows local users to gain SYSTEM privileges by modifying the VERSION.dll. This is due to a weak Access Control List ACL used for the MobileBrServ...

CVE-2016-2855: Undefined Security Weakness

The Huawei Mobile Broadband HL Service 22.001.25.00.03 and earlier uses a weak ACL for the MobileBrServ program data directory, which allows local users to gain SYSTEM privileges by modifying VERSION.dll...