Lucene search
+L

1329 matches found

Positive Technologies
Positive Technologies
added 2020/02/11 12:00 a.m.5 views

PT-2020-1604 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Installer when processing symbolic links. This can be exploited by an attacker to elevate their...

7.8CVSS7.5AI score0.00959EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2020/02/11 12:00 a.m.68 views

CVE-2020-0683

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka ‘Windows Installer Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-0686. Recent assessments: J3rryBl4nks at March 03, 2020 3:13pm UTC reported: This...

7.8CVSS8.2AI score0.07667EPSS
SaveIn wildExploits5References3
Positive Technologies
Positive Technologies
added 2020/02/11 12:00 a.m.4 views

PT-2020-1603 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Installer affected versions not specified Description: An elevation of privilege issue exists in the Windows Installer when MSI packages process symbolic links. This allows an attacker to potentially elevate their privileges...

7.8CVSS7.6AI score0.07667EPSS
SaveExploits5References23
ATTACKERKB
ATTACKERKB
added 2020/02/11 12:00 a.m.45 views

CVE-2020-0686

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka ‘Windows Installer Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-0683. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assess...

7.8CVSS8.1AI score0.07667EPSS
SaveIn wildExploits5References2
NVD
NVD
added 2020/01/30 6:15 p.m.25 views

CVE-2020-7906

In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3...

7.5CVSS7.5AI score0.00673EPSS
SaveExploits0References2
Prion
Prion
added 2020/01/30 6:15 p.m.25 views

Code injection

In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3...

5CVSS7.5AI score0.00673EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/01/30 5:09 p.m.69 views

CVE-2020-7906

JetBrains Rider for Windows had unsigned binaries in the installer during 2019.3 EAP2–EAP7; the issue was fixed in the 2019.3 release. Affected component: Windows installer binaries. Root cause: unsigned binaries were distributed with the Windows installer. Impact details are limited to the unsig...

7.5CVSS7.5AI score0.00673EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/01/30 5:09 p.m.33 views

CVE-2020-7906

In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3...

7.5AI score0.00673EPSS
SaveExploits0References2
Cisco
Cisco
added 2020/01/22 4:00 p.m.31 views

Cisco Umbrella Roaming Client for Windows Install Vulnerability

A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...

4.4CVSS1.1AI score0.00183EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/12/09 12:00 a.m.15 views

The vulnerability of the Windows Installer component allows attackers to exploit their privileges.

The vulnerability of the Windows Installer component in operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.1AI score0.00786EPSS
SaveExploits0References3
OSV
OSV
added 2019/11/25 3:15 p.m.7 views

UBUNTU-CVE-2019-13702

Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable...

7.8CVSS7.1AI score0.00525EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2019/11/13 12:00 a.m.63 views

Microsoft Windows Multiple Vulnerabilities (KB4525236)

This host is missing a critical security update according to Microsoft KB4525236 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.9CVSS7.1AI score0.75859EPSS
SaveExploits34References3
OpenVAS
OpenVAS
added 2019/11/13 12:00 a.m.60 views

Microsoft Windows Multiple Vulnerabilities (KB4525232)

This host is missing a critical security update according to Microsoft KB4525232 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.9CVSS7.1AI score0.75859EPSS
SaveExploits34References3
OpenVAS
OpenVAS
added 2019/11/13 12:00 a.m.57 views

Microsoft Windows Multiple Vulnerabilities (KB4525237)

This host is missing a critical security update according to Microsoft KB4525237 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.9CVSS7.1AI score0.75859EPSS
SaveExploits38References3
OpenVAS
OpenVAS
added 2019/11/13 12:00 a.m.84 views

Microsoft Windows Multiple Vulnerabilities (KB4523205)

This host is missing a critical security update according to Microsoft KB4523205 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.9CVSS7.1AI score0.75859EPSS
SaveExploits38References3
NVD
NVD
added 2019/11/12 7:15 p.m.20 views

CVE-2019-1415

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...

7.8CVSS8.7AI score0.00786EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/12 7:15 p.m.8 views

CVE-2019-1415

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...

7.8CVSS7.2AI score0.00786EPSS
SaveExploits0References1
Prion
Prion
added 2019/11/12 7:15 p.m.23 views

Privilege escalation

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...

4.6CVSS8.2AI score0.00786EPSS
SaveExploits0References1Affected Software5
Cvelist
Cvelist
added 2019/11/12 6:53 p.m.30 views

CVE-2019-1415

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...

8.6AI score0.00786EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2019/11/12 8:00 a.m.30 views

Windows Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations. To exploit the vulnerability, an attacker would require unprivileged execution on the victim system. After successfully exploiting the vulnerability, an...

7.8CVSS3.3AI score0.00786EPSS
SaveExploits0
Rows per page
Query Builder