Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-24499 Windows Installer Elevation of Privilege Vulnerability

...

Microsoft Windows Installer Elevation of Privilege Vulnerability

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. An elevation of privilege vulnerability exists in Microsoft Windows Installer. The vulnerability stems from an incorrect programmatic...

CVE-2022-22187

An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper Identity Management Service JIMS allows an unprivileged user to trigger a repair operation. Running a repair operation, in turn, will trigger a number of file operations in the...

Privilege escalation

An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper Identity Management Service JIMS allows an unprivileged user to trigger a repair operation. Running a repair operation, in turn, will trigger a number of file operations in the...

CVE-2022-22187 JIMS: Local Privilege Escalation vulnerability via repair functionality

An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper Identity Management Service JIMS allows an unprivileged user to trigger a repair operation. Running a repair operation, in turn, will trigger a number of file operations in the...

CVE-2022-22187

The CVE-2022-22187 entry describes an improper privilege management vulnerability in the Windows Installer framework used by Juniper Identity Management Service (JIMS). An unprivileged user can trigger a repair operation, causing file operations in the user’s %TEMP% folder, some executed from SYS...

Juniper Networks Juniper Identity Management Service 安全漏洞

Juniper Networks Juniper Identity Management Service is a Juniper Networks service that protects company resources by authenticating and restricting user access based on roles. A security vulnerability exists in Juniper Networks Juniper Identity Management Service JIMS versions prior to 1.4.0,...

CVE-2022-22187

An Improper Privilege Management vulnerability in the Windows Installer framework used in the Juniper Networks Juniper Identity Management Service JIMS allows an unprivileged user to trigger a repair operation. Running a repair operation, in turn, will trigger a number of file operations in the...

PT-2022-2667 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of Windows operating systems. It allows an attacker to potentially elevate their...

Microsoft Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A vulnerability exists in Microsoft Windows Installer with privilege license and access control issues. The following products and...

Microsoft Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. An elevation of privilege vulnerability exists in Microsoft Windows Installer. The vulnerability stems from an incorrect programmatic...

PT-2022-2720 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of Windows operating systems. It allows an attacker to potentially elevate their...

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

Path traversal

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

CVE-2022-28779

CVE-2022-28779 affects Samsung Android USB Driver for Windows, prior to version 1.7.50. The issue is an uncontrolled search path element in the installer, enabling arbitrary code execution with local access. Affected component: the Windows installer program of the Samsung USB driver. Root cause: ...

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

Samsung Android USB Driver 代码问题漏洞

Samsung Android USB Driver is a Samsung USB driver from Samsung South Korea. A security vulnerability exists in Samsung Android USB Driver versions prior to 1.7.50, which originates from an uncontrolled search path element vulnerability in the windows installer program. An attacker could exploit...

CVE-2022-26659

Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log...