1322 matches found
Microsoft Windows Installer 权限许可和访问控制问题漏洞
Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. An elevation of privilege vulnerability exists in Microsoft Windows Installer. The vulnerability stems from an incorrect programmatic...
Microsoft Windows Installer 权限许可和访问控制问题漏洞
Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A vulnerability exists in Microsoft Windows Installer with privilege license and access control issues. The following products and...
PT-2022-2720 · Microsoft · Windows Installer +1
Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of Windows operating systems. It allows an attacker to potentially elevate their...
CVE-2022-28779
Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...
CVE-2022-28779
Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...
Path traversal
Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...
CVE-2022-28779
CVE-2022-28779 affects Samsung Android USB Driver for Windows, prior to version 1.7.50. The issue is an uncontrolled search path element in the installer, enabling arbitrary code execution with local access. Affected component: the Windows installer program of the Samsung USB driver. Root cause: ...
CVE-2022-28779
Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...
Samsung Android USB Driver 代码问题漏洞
Samsung Android USB Driver is a Samsung USB driver from Samsung South Korea. A security vulnerability exists in Samsung Android USB Driver versions prior to 1.7.50, which originates from an uncontrolled search path element vulnerability in the windows installer program. An attacker could exploit...
CVE-2022-26659
Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log...
CVE-2022-26659
Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log...
PT-2022-17991 · Docker · Docker Desktop
Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.6.0 Description: The issue allows an attacker to overwrite administrator-writable files by creating a symlink where the installer writes its log file. This can be exploited when the Docker Desktop installer ...
The vulnerability of the Windows Installer component of the Microsoft Windows operating system allows attackers to circumvent security restrictions and gain increased privileges.
The vulnerability of the Windows Installer component of the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to bypass security restrictions and enhance their privileges...
The vulnerability of the Windows Installer component of the Microsoft Windows operating system, which allows a perpetrator to disclose protected information
The vulnerability of the Windows Installer component of the Microsoft Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2022-24618
Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unprivileged local users to elevate privileges to SYSTEM via the "Browse For Folder" window accessible by triggering a "Repair" on the MSI package located in C:\Windows\Installer...
CVE-2022-23296
Windows Installer Elevation of Privilege Vulnerability...
CVE-2022-23296
Windows Installer Elevation of Privilege Vulnerability...
Privilege escalation
Windows Installer Elevation of Privilege Vulnerability...