KB4561649: Windows 10 June 2020 Security Update

The remote Windows host is missing security update 4561649. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execu...

PostgreSQL 9.5.x < 9.5.22 / 9.6.x < 9.6.18 / 10.x < 10.13 / 11.x < 11.8 / 12.x < 12.3 Arbitrary Code Execution Vulnerability

The version of PostgreSQL installed on the remote host is 9.5 prior to 9.5.22, 9.6 prior to 9.6.18, 10 prior to 10.13, 11 prior to 11.8, or 12 prior to 12.3. As such, it is potentially affected by a which allows a Windows installer the ability to run executables from uncontrolled directories,...

The vulnerability of the Windows Installer component on Windows operating systems allows a perpetrator to increase their privileges or execute arbitrary code.

The vulnerability of the Windows Installer component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code...

Apple Windows Migration Assistant Windows Installer Component Dynamic Library Loading Vulnerability

Apple Windows Migration Assistant is an Apple application that supports the migration of data from Windows systems to Mac devices.Windows Installer is Apple Windows Migration Assistant's Windows Installer is the Windows installation program for Apple Windows Migration Assistant. A security...

CVE-2020-1078

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...

Privilege escalation

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...

CVE-2020-1078

Technical details about CVE-2020-1078 (Windows Installer Elevation of Privilege) are not provided in the connected documents. Monitor for updates.

CVE-2020-1078 Windows Installer Elevation of Privilege Vulnerability

...

PT-2020-6837 · Unknown +1 · Postgresql +1

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 9.5 through 12 Description: The issue is related to the Windows installer for PostgreSQL, which invokes system-provided executables without fully-qualified paths. This allows executables in the directory where the installe...

Vulnerability in packaging (CVE-2020-10733)

Windows installer runs executables from uncontrolled directories The Windows installer for PostgreSQL invokes system-provided executables that do not have fully-qualified paths. Executables in the directory where the installer loads or the current working directory take precedence over the intend...

CVE-2020-5896

On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...

Design/Logic Flaw

On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...

CVE-2020-5896

CVE-2020-5896 affects BIG-IP Edge Client for Windows. The Windows Installer Service’s temporary folder in versions 7.1.5–7.1.9 has weak file/folder permissions, enabling potential privilege escalation. Advisory details indicate that signed executables and MSI files could be executed from the temp...

Windows Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations. To exploit the vulnerability, an attacker would require unprivileged execution on the victim system. After successfully exploiting the vulnerability, an...

KLA11777 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of...

KLA11773 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of...

Google Earth Pro Remote Code Execution Vulnerability

Google Earth Pro is a 3D interactive globe from Google USA, which presents a 3D representation of the Earth based primarily on satellite imagery. A security vulnerability exists in the Windows installer of Google Earth Pro versions prior to 7.3.3. A remote attacker can exploit the vulnerability t...

CVE-2020-8895

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...

CVE-2020-8895

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...

Design/Logic Flaw

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...