Windows Installer Elevation of Privilege Vulnerability

...

Windows Installer Elevation of Privilege Vulnerability

...

PT-2022-2667 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of Windows operating systems. It allows an attacker to potentially elevate their...

Microsoft Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A vulnerability exists in Microsoft Windows Installer with privilege license and access control issues. The following products and...

PT-2022-2720 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of Windows operating systems. It allows an attacker to potentially elevate their...

Microsoft Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. An elevation of privilege vulnerability exists in Microsoft Windows Installer. The vulnerability stems from an incorrect programmatic...

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

Path traversal

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

CVE-2022-28779

CVE-2022-28779 affects Samsung Android USB Driver for Windows, prior to version 1.7.50. The issue is an uncontrolled search path element in the installer, enabling arbitrary code execution with local access. Affected component: the Windows installer program of the Samsung USB driver. Root cause: ...

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

Samsung Android USB Driver 代码问题漏洞

Samsung Android USB Driver is a Samsung USB driver from Samsung South Korea. A security vulnerability exists in Samsung Android USB Driver versions prior to 1.7.50, which originates from an uncontrolled search path element vulnerability in the windows installer program. An attacker could exploit...

SUSE: Security Advisory (SUSE-SU-2022:1131-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.

...

Fortinet FortiClient for Windows权限提升漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet, Inc. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. executable file in the FortiClient installer...

The vulnerability in the optimization application for Lenovo Thin Installer, related to insufficient protection of service data, allows a malicious actor to trigger a service failure.

The vulnerability of the optimization application for Lenovo Thin Installer is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2021-44169

A improper initialization in Fortinet FortiClient Windows version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, version 7.0.3 and below allows attacker to gain administrative privileges via placing a malicious executable inside the FortiClient installer's directory...

CVE-2021-44169

A improper initialization in Fortinet FortiClient Windows version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, version 7.0.3 and below allows attacker to gain administrative privileges via placing a malicious executable inside the FortiClient installer's directory...

Fortinet FortiClient 安全漏洞

Fortinet FortiClient is a mobile endpoint security solution from Fortinet, Inc. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance, and two-factor authentication when connected to a FortiGate firewall appliance. executable file in the FortiClient installer...