1322 matches found
CVE-2020-0798
An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer...
CVE-2020-0683
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686...
CVE-2019-1415
An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...
CVE-2019-14600
Uncontrolled search path element in the installer for IntelR SNMP Subagent Stand-Alone for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2019-14601
Improper permissions in the installer for IntelR RWC 3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...
Microsoft Windows Installer Service Link Following Information Disclosure Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...
CVE-2025-29837
Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...
CVE-2025-29837
Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...
CVE-2025-29837
Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...
CVE-2025-29837
Technical details about CVE-2025-29837 (affected products, root cause, exploitability) are not publicly disclosed in the provided connected documents; no specifics on impact or remediation are available here.
CVE-2025-29837 Windows Installer Information Disclosure Vulnerability
...
CVE-2025-29837 Windows Installer Information Disclosure Vulnerability
...
Windows Installer Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...
Microsoft Windows Installer 后置链接漏洞
Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. A backlink vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to obtain...
PT-2025-20952 · Microsoft · Windows Installer +1
Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Windows Installer. This allows an authorized attacker to disclose informati...
FAS - Upgrade of FAS server failed with error "Unable to complete the installation"
1 Attempting to upgrade FAS server component fails with below error- 2 Reinstallation attempt fails with the same error. 3 Event viewer shows below error : Log Name: Application Source: MsiInstaller Event ID: 11722 Task Category: None Level: Error Description: Product: Citrix Federated...
The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Windows Installer component in Windows operating systems is related to an incorrect definition of the reference before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2025-27727
Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...