CVE-2022-26659

Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log...

PT-2022-17991 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.6.0 Description: The issue allows an attacker to overwrite administrator-writable files by creating a symlink where the installer writes its log file. This can be exploited when the Docker Desktop installer ...

The vulnerability of the Windows Installer component of the Microsoft Windows operating system allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the Windows Installer component of the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to bypass security restrictions and enhance their privileges...

The vulnerability of the Windows Installer component of the Microsoft Windows operating system, which allows a perpetrator to disclose protected information

The vulnerability of the Windows Installer component of the Microsoft Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2022-24618

Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unprivileged local users to elevate privileges to SYSTEM via the "Browse For Folder" window accessible by triggering a "Repair" on the MSI package located in C:\Windows\Installer...

CVE-2022-23296

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-23296

Windows Installer Elevation of Privilege Vulnerability...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-23296 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2022-25943

The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is installed...

Installer of WPS Office for Windows misconfigures the ACL for the installation directory

Overview Installer of WPS Office for Windows misconfigures the ACL for the installation directory. When WPS Office for Windows is installed, some service program is registered to the OS, which is invoked with some administrative privilege. The installer fails to configure properly the ACL for the...

Microsoft Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A vulnerability exists in Microsoft Windows Installer due to permission and access control issues. The following products and editions...

Python 代码问题漏洞

Python is an open source, object-oriented programming language from the Python Foundation. The language is extensible, supports modules and packages, and supports multiple platforms. urllib is one of the modules used to handle URLs. Python has a security vulnerability that stems from a missing...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Cleanup Manager in Windows operating systems relates to the improper handling of references before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...

February 1, 2022, update for Office 2016 (KB5002138)

None None...

CVE-2022-21908

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-21908

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-21908

Windows Installer Elevation of Privilege Vulnerability...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...