1360 matches found
Four zero-days included in group of 79 vulnerabilities Microsoft discloses, including one with 9.8 severity score
Microsoft disclosed four vulnerabilities that are actively being exploited in the wild as part of its regular Patch Tuesday security update this week in what's become a regular occurrence for the company's patches in 2024. Two of the zero-day vulnerabilities, CVE-2024-38226 and CVE-2024-38014,...
CVE-2024-38014
Windows Installer Elevation of Privilege Vulnerability...
CVE-2024-38014 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2024-38014
CVE-2024-38014 is a Windows Installer privilege-escalation vulnerability (local, CVSSv3.1: 7.8) that could allow an attacker with low privileges to gain SYSTEM-level access. The issue targets the Windows Installer component and is described in sources as an improper privilege-management flaw. Pub...
September 10, 2024—KB5043050 (OS Build 17763.6293) - EXPIRED
None None...
September 10, 2024—Hotpatch KB5042880 (OS Build 20348.2695)
None None...
September 10, 2024—KB5043080 (OS Build 26100.1742)
None None...
September 10, 2024—KB5043055 (OS Build 25398.1128)
None None...
September 10, 2024—KB5042881 (OS Build 20348.2700)
None None...
September 10, 2024—KB5043067 (OS Build 22000.3197)
None None...
Microsoft Windows Installer 安全漏洞
Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate...
PT-2024-6053
Name of the Vulnerable Software and Affected Versions Microsoft Windows Installer affected versions not specified Description The Windows Installer component contains a flaw in access control management. Successful exploitation of this issue could allow an attacker to elevate privileges to the...
VulnCheck KEV: CVE-2024-38014
Microsoft Windows Installer contains an improper privilege management vulnerability that could allow an attacker to gain SYSTEM privileges...
CVE-2024-35214 Vulnerability in CylanceOPTICS Windows Installer Package Impacts CylanceOPTICS for Windows
A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for Windows version 3.2 and 3.3 could allow an attacker to potentially uninstall CylanceOPTICS from a system thereby leaving it with only the protection of CylancePROTECT...
July 9, 2024—KB5040497 (Monthly Rollup)
None None...
July 9, 2024—KB5040437 (OS Build 20348.2582)
None None...
July 9, 2024—KB5040427 (OS Builds 19044.4651 and 19045.4651) - EXPIRED
None None...
July 9, 2024—KB5040499 (Monthly Rollup)
None None...