Design/Logic Flaw

A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...

CVE-2019-16000 Cisco Umbrella Roaming Client for Windows Install Vulnerability

A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...

CVE-2019-16000 Cisco Umbrella Roaming Client for Windows Install Vulnerability

A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...

CVE-2019-16000

CVE-2019-16000 affects the Cisco Umbrella Roaming Client for Windows. The issue is in the automatic update process where Windows Installer verification is insufficient, allowing an authenticated, local attacker to place a file in a specific location and bypass policy to install unapproved applica...

CVE-2020-10733

CVE-2020-10733 affects the Windows PostgreSQL installer (versions 9.5 through 12). The root cause is that the installer invokes system-provided executables without fully-qualified paths, so executables in the load directory or current working directory can be chosen instead of the intended ones. ...

CVE-2020-7311

Privilege Escalation vulnerability in the installer in McAfee Agent MA for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files...

CVE-2020-7311

Privilege Escalation vulnerability in the installer in McAfee Agent MA for Windows prior to 5.6.6 allows local users to assume SYSTEM rights during the installation of MA via manipulation of log files...

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to improper handling of file system operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2020-3677 · Oracle +1 · Java +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the fixed version Description: A spoofing vulnerability exists when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files. In an...

The vulnerability of the Windows Installer component on Microsoft Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Installer component in Microsoft Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

MAMP PRO 4.2.0 Local Privilege Escalation Vulnerability

Exploit Title: MAMP PRO 4.2.0 Local Privilege Escalation Exploit Author: b1nary Vendor Homepage: https://www.mamp.info/ Software Link: https://downloads.mamp.info/MAMP-PRO-WINDOWS/releases/4.2.0/MAMPMAMPPRO4.2.0.exe Version: 4.2.0 Tested on: Windows 10 Pro x64 Version 10.0.19041 MAMPPRO Windows...

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to improper handling of file system operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Windows Installer installation service on Microsoft Windows operating systems is related to improper handling of file system operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2020-13162

A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows which runs as NT AUTHORITY/SYSTEM allows unprivileged users to run a Microsoft Installer executable with elevated privileges...

Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2021-22928)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows Installer is one of the Windows-based tool components, main...

Microsoft Windows Modules Installer Service Elevation of Privilege Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability in the Microsoft Windows Modules Installer Service, which exists because the program does not properly handle class object members, can be...

Microsoft Windows Installer Elevation of Privilege Vulnerability (CNVD-2021-29546)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows Installer is one of the Windows-based tool components, main...

Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2021-31220)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Windows Installer is one of the Windows-based tool components, main...

CVE-2020-1312

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...

CVE-2020-1312

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...