Windows Installer Spoofing Vulnerability

...

PT-2021-6965 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component, allowing an attacker to potentially elevate their privileges. This could affect the system, but...

Microsoft Windows Installer 安全漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. The following products and versions are affected:Windows Server 2019...

Microsoft Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Windows Installer in Microsoft...

PT-2021-4798 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of the Windows Installer component in Microsoft Windows operating systems. This can allow...

Node.js -- July 2021 Security Releases

Node.js reports: libuv upgrade - Out of bounds read Medium CVE-2021-22918 Node.js is vulnerable to out-of-bounds read in libuv's uvidnatoascii function which is used to convert strings to ASCII. This is called by Node's dns module's lookup function and can lead to information disclosures or...

July 2021 Security Releases

July 2021 Security Releases Update 1-Jul-2021 Security releases available Updates are now available for v16.x, v14.x, and v12.x Node.js release lines for the following issues. libuv upgrade - Out of bounds read Medium CVE-2021-22918 Node.js is vulnerable to out-of-bounds read in libuv's...

The vulnerability of the RabbitMQ message broker installer for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the RabbitMQ message broker installer for Windows operating systems is related to deficiencies in access control for directories of connected modules. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

CVE-2021-23022

On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's temporary folder has weak file and folder permissions. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2021-23022

On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's temporary folder has weak file and folder permissions. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2021-23023

On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, a DLL hijacking issue exists in cachecleaner.dll included in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2021-23023

On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, a DLL hijacking issue exists in cachecleaner.dll included in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2021-23022

On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's temporary folder has weak file and folder permissions. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2021-23022

CVE-2021-23022 affects the BIG-IP Edge Client for Windows: the Windows Installer Service temporary folder has weak permissions, enabling local privilege escalation. Affected versions are 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1; non-vulnerable/End of Technical Support versions are...

Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. A security vulnerability exists in Windows Installer. The following products and versions are affected:Windows 10 Version 1607 for 32-bit Systems,Windows 10 Version 1607 for x64-based Systems,Windows Server 2016,Windo...

PT-2021-6306 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Installer component of the Microsoft Windows operating system. This vulnerability can be exploited t...

Microsoft Windows Multiple Vulnerabilities (KB5003197)

This host is missing a critical security update according to Microsoft KB5003197 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1074

NVIDIA GPU Display Driver for Windows installer contains a vulnerability where an attacker with local unprivileged system access may be able to replace an application resource with malicious files. This attack requires a user with system administration rights to execute the installer and requires...

The vulnerability of the Windows Installer component on Microsoft Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Installer component on Microsoft Windows operating systems, which allows attackers to perform spoofing attacks

The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...