7588 matches found
PT-2025-3718 · Toolstick · Toolstick
Name of the Vulnerable Software and Affected Versions: ToolStick affected versions not specified Description: The issue is caused by an uncontrolled search path in the ToolStick installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code executi...
PT-2025-3715 · Silicon · Silicon Labs (8-Bit) Ide Installer
Name of the Vulnerable Software and Affected Versions: Silicon Labs 8-bit IDE installer affected versions not specified Description: The issue is caused by an uncontrolled search path in the Silicon Labs 8-bit IDE installer, leading to DLL hijacking vulnerabilities. These vulnerabilities can resu...
Silicon USBXpress Win 98SE Dev Kit installer 代码问题漏洞
Silicon USBXpress Win 98SE Dev Kit installer is a USBXpress Win 98SE Dev Kit installer from Silicon. A security vulnerability exists in the Silicon USBXpress Win 98SE Dev Kit installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate...
Silicon IDE installer 代码问题漏洞
Silicon IDE installer is a development program installer from Silicon Corporation. A security vulnerability exists in Silicon IDE installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...
PT-2025-3723 · Unknown · Usbxpress Sdk
Name of the Vulnerable Software and Affected Versions: USBXpress SDK affected versions not specified Description: The issue is caused by an uncontrolled search path in the USBXpress SDK installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code...
Silicon USBXpress SDK installer 代码问题漏洞
Silicon USBXpress SDK installer is a USBXpress SDK installer from Silicon Corporation. A security vulnerability exists in the Silicon USBXpress SDK installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary...
PT-2025-3724 · Usbxpress · Usbxpress
Name of the Vulnerable Software and Affected Versions: USBXpress Win 98SE Dev Kit affected versions not specified Description: The issue is caused by an uncontrolled search path in the USBXpress Win 98SE Dev Kit installer, leading to DLL hijacking vulnerabilities. This can result in privilege...
PT-2025-3719 · Silicon · Cp210 Vcp Win 2K Installer
Name of the Vulnerable Software and Affected Versions: CP210 VCP Win 2k installer affected versions not specified Description: The issue is caused by an uncontrolled search path in the installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code...
Silicon Flash Programming Utility installer 代码问题漏洞
Silicon Flash Programming Utility installer is a Flash Programming Utility installer from Silicon. A security vulnerability exists in the Silicon Flash Programming Utility installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privilege...
PNGPlug Loader Delivers ValleyRAT Malware Through Fake Software Installers
Cybersecurity researchers are calling attention to a series of cyber attacks that have targeted Chinese-speaking regions like Hong Kong, Taiwan, and Mainland China with a known malware called ValleyRAT. The attacks leverage a multi-stage loader dubbed PNGPlug to deliver the ValleyRAT payload,...
CVE-2025-0567
CVE-2025-0567 affects Epic Games Launcher (versions up to 17.2.1). The issue is in the profapi.dll library in the Installer component, causing an untrusted search path. Local attack is required, with high attack complexity and low overall impact (confidentiality/integrity/availability). The CVSS ...
Epic Games Launcher 代码问题漏洞
Epic Games Launcher is a game software launcher from Epic Games USA. A code issue vulnerability exists in Epic Games Launcher version 17.2.1 and earlier, which stems from code in the profapi.dll library in the component Installer that can lead to untrusted search paths...
Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2025-02836)
Microsoft Windows Installer is a component of the Windows operating system from Microsoft USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...
Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2025-02835)
Microsoft Windows Installer is a component of the Windows operating system from Microsoft USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...
PT-2025-3754 · Zoom · Zoom Workplace App For Windows
Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: The issue concerns an untrusted search path in the installer for some Zoom Workplace Apps for Windows. This could allow an authorized user to conduct an escalation o...
The vulnerability of the App Package Installer installation program for Microsoft Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the App Package Installer installation program for Microsoft Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...
Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...
The vulnerability of the Windows Installer component on Windows operating systems allows a perpetrator to elevate their privileges to the SYSTEM level.
The vulnerability of the Windows Installer component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...
