InnoSetup 代码问题漏洞

InnoSetup is a free installer for Windows programs provided by Jordan Russell and Martijn Laan of jrsoftware. A security vulnerability exists in InnoSetup that originates from an uncontrolled search path in the application's installer...

CVE-2022-31216

Vulnerabilities in the Drive Composer allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Drive Composer installer file allows a low-privileged user to run a "repair" operation o...

PT-2022-4866 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: IntelliJ IDEA versions prior to 2022.2.2 Description: The issue is related to an uncontrolled search path element in the executable files of the IntelliJ IDEA integrated development environment installer. Exploitation of this issue may allow ...

CVE-2022-31467 DLL Hijacking Vulnerability in Quick Heal Total Security

A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature...

JVN#60037444: Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries

Installer of Trend Micro Password Manager provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use...

CVE-2022-28714

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, a DLL Hijacking vulnerability exists in...

CVE-2021-20051

SonicWall Global VPN Client 4.10.7.1117 installer 32-bit and 64-bit and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system...

Vulnerability fixed in FortiClient

A vulnerability has been fixed in FortiClient. The vulnerability allows a malicious person with access to the system to execute or delete files with admin rights. The vulnerability is located in the FortiClient MSI installer. Fortinet has released updates to fix the vulnerability. More informatio...

The vulnerability of the installer component of the WPS Office office software package allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the installer component of the WPS Office office software package is related to the loading of a non-existent dynamic library, shcore.dll. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the installer component of the WPS Office office software package allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the installer component of the WPS Office office software package is related to the loading of a dynamic library that does not exist. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

CVE-2022-26081

The installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer...

CVE-2022-25969

The installer of WPS Office Version 10.8.0.6186 insecurely load VERSION.DLL or some other DLLs, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer...

The vulnerability of the Windows Installer component of the Microsoft Windows operating system, which allows a perpetrator to disclose protected information

The vulnerability of the Windows Installer component of the Microsoft Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-26337

Trend Micro Password Manager Consumer installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine...

CVE-2022-26488

Removed by vendor...

Trend Micro Password Manager 代码问题漏洞

Trend Micro Password Manager Installer is a password manager installer from Trend Micro, Inc. An elevation of privilege vulnerability exists in Trend Micro Password Manager Installer, which can be exploited by attackers to elevate privileges on the affected machine using specially crafted files...

Incorrect signature verification on gzip-compressed install images

The coreos-installer is a program to fetch a disk image and stream it to a target disk. During the installation process the installation image gpg signatures are verified. The signature verification can be bypassed for gzip-compressed images due to a flaw in gzip coreos-installer wrapper. When th...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Cleanup Manager in Windows operating systems relates to the improper handling of references before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...