1322 matches found
The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges
The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Bug Left Some Windows PCs Dangerously Unpatched
Microsoft Corp. today released updates to fix at least 79 security vulnerabilities in its Windows operating systems and related software, including multiple flaws that are already showing up in active attacks. Microsoft also corrected a critical bug that has caused some Windows 10 PCs to remain...
Four zero-days included in group of 79 vulnerabilities Microsoft discloses, including one with 9.8 severity score
Microsoft disclosed four vulnerabilities that are actively being exploited in the wild as part of its regular Patch Tuesday security update this week in what's become a regular occurrence for the company's patches in 2024. Two of the zero-day vulnerabilities, CVE-2024-38226 and CVE-2024-38014,...
CVE-2024-38014
Windows Installer Elevation of Privilege Vulnerability...
CVE-2024-38014 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2024-38014
CVE-2024-38014 is a Windows Installer privilege-escalation vulnerability (local, CVSSv3.1: 7.8) that could allow an attacker with low privileges to gain SYSTEM-level access. The issue targets the Windows Installer component and is described in sources as an improper privilege-management flaw. Pub...
September 10, 2024—Hotpatch KB5042880 (OS Build 20348.2695)
None None...
September 10, 2024—KB5043050 (OS Build 17763.6293) - EXPIRED
None None...
September 10, 2024—KB5043080 (OS Build 26100.1742)
None None...
September 10, 2024—KB5043055 (OS Build 25398.1128)
None None...
September 10, 2024—KB5042881 (OS Build 20348.2700)
None None...
September 10, 2024—KB5043067 (OS Build 22000.3197)
None None...
PT-2024-6053
Name of the Vulnerable Software and Affected Versions Microsoft Windows Installer affected versions not specified Description The Windows Installer component contains a flaw in access control management. Successful exploitation of this issue could allow an attacker to elevate privileges to the...
Microsoft Windows Installer 安全漏洞
Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate...
VulnCheck KEV: CVE-2024-38014
Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges...
CVE-2024-35214 Vulnerability in CylanceOPTICS Windows Installer Package Impacts CylanceOPTICS for Windows
A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for Windows version 3.2 and 3.3 could allow an attacker to potentially uninstall CylanceOPTICS from a system thereby leaving it with only the protection of CylancePROTECT...
July 9, 2024—KB5040427 (OS Builds 19044.4651 and 19045.4651) - EXPIRED
None None...
July 9, 2024—KB5040499 (Monthly Rollup)
None None...