CVE-2024-21436

Windows Installer Elevation of Privilege Vulnerability...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

CVE-2024-21436 Windows Installer Elevation of Privilege Vulnerability

...

Windows Installer Elevation of Privilege Vulnerability

...

PT-2024-2122 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system installer, allowing an attacker to elevate their privileges. This can affect the system,...

Microsoft Windows Installer Security Vulnerability

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges. The...

CVE-2023-5993

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

Authentication flaw

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-5993 Privilege Escalation in SafeNet Authentication Client Installer

A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via local access...

CVE-2023-5993

CVE-2023-5993 affects Thales SafeNet Authentication Client on Windows due to a Windows Installer flaw prior to version 10.8 R10 that enables local privilege escalation. The root cause is a vulnerability in the installer process, allowing an attacker with local access to escalate privileges (CVE d...

PT-2024-14855 · Microsoft +1 · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Thales SafeNet Authentication Client versions prior to 10.8 R10 Description: A flaw in the Windows Installer in Thales SafeNet Authentication Client allows an attacker to escalate their privilege level via local access. Recommendations: For...

CVE-2024-22042

A vulnerability has been identified in Unicam FX All versions. The windows installer agent used in affected product contains incorrect use of privileged APIs that trigger the Windows Console Host conhost.exe as a child process with SYSTEM privileges. This could be exploited by an attacker to...

Privilege escalation

A vulnerability has been identified in Unicam FX All versions. The windows installer agent used in affected product contains incorrect use of privileged APIs that trigger the Windows Console Host conhost.exe as a child process with SYSTEM privileges. This could be exploited by an attacker to...

CVE-2024-22042

CVE-2024-22042 affects Siemens UniCam FX (All versions). The Windows installer agent contains incorrect use of privileged APIs, causing conhost.exe to run as a child process with SYSTEM privileges and enabling local privilege escalation. This vulnerability is documented across multiple sources (S...

CVE-2024-22042

A vulnerability has been identified in Unicam FX All versions. The windows installer agent used in affected product contains incorrect use of privileged APIs that trigger the Windows Console Host conhost.exe as a child process with SYSTEM privileges. This could be exploited by an attacker to...

PT-2024-1743 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Unicam FX All versions Description: The issue is related to the incorrect use of privileged APIs in the Windows installer agent used by Unicam FX. This could allow an attacker to perform a local privilege escalation attack by exploiting the...

PT-2024-40202 · Microsoft · Wix

Name of the Vulnerable Software and Affected Versions: WiX installer framework affected versions not specified Description: The vulnerability allows an attacker to escalate privileges through DLL redirection attacks. When the bundle is not run as admin, the user's TEMP folder is used, and a utili...

PT-2024-40006 · Microsoft · Wix

Name of the Vulnerable Software and Affected Versions: WiX installer framework affected versions not specified Description: The vulnerability allows an attacker to escalate privileges through DLL redirection attacks. When the bundle is not run as admin, the user's TEMP folder is used, and a utili...

CVE-2024-24810

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges. This impacts any installer built with the WiX installer framework. This issue has been...

CVE-2024-24810 WiX is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges. This impacts any installer built with the WiX installer framework. This issue has been...