Lucene search
+L

7560 matches found

OSV
OSV
added 2022/04/05 1:15 a.m.9 views

CVE-2022-0799

Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file...

8.8CVSS8.7AI score
SaveExploits0References3
NVD
NVD
added 2022/04/05 1:15 a.m.18 views

CVE-2022-0799

Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file...

8.8CVSS0.0099EPSS
SaveExploits0References3
OSV
OSV
added 2022/04/05 1:15 a.m.5 views

DEBIAN-CVE-2022-0799

Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file...

8.8CVSS8.3AI score0.0099EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/05 1:15 a.m.7 views

UBUNTU-CVE-2022-0799

Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file...

8.8CVSS7.3AI score0.0099EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2022/04/05 1:15 a.m.34 views

CVE-2022-0799

Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file...

8.8CVSS7.2AI score0.0099EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/04/05 1:15 a.m.5 views

CVE-2022-0799

Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file...

8.8CVSS7.8AI score0.0099EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2022/04/05 12:25 a.m.108 views

CVE-2022-0799

Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file...

8.8CVSS8.8AI score0.0099EPSS
SaveExploits0
Cvelist
Cvelist
added 2022/04/05 12:25 a.m.31 views

CVE-2022-0799

Insufficient policy enforcement in Installer in Google Chrome on Windows prior to 99.0.4844.51 allowed a remote attacker to perform local privilege escalation via a crafted offline installer file...

8.6AI score0.0099EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2022/04/05 12:0 a.m.9 views

April 5, 2022, update for Project 2016 (KB5002132)

None None...

6.1AI score
SaveExploits0
Fortinet
Fortinet
added 2022/04/05 12:0 a.m.100 views

FortiClient (Windows) - privilege escalation in online installer due to incorrect working directory

An improper initialization CWE-665 vulnerability in FortiClient Windows may allow a local attacker to gain administrative privileges via placing a malicious executable inside the FortiClient installer's directory...

4.6CVSS5.3AI score0.00373EPSS
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/30 12:0 a.m.12 views

The vulnerability of the Oracle Solaris operating system installer allows a hacker to gain access to modify, add, delete data, or cause partial service failure.

The vulnerability of the Oracle Solaris operating system installer, related to errors in the code. Exploiting this vulnerability can allow an attacker to gain access to modify, add, delete data, or cause partial service failure...

3.9CVSS6.2AI score0.00283EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.14 views

The vulnerability of the Microsoft App Installer, related to bypassing authentication through spoofing, allows attackers to carry out spoofing attacks.

The vulnerability of the Microsoft App Installer relates to the bypassing of authentication processes through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially created malware package...

7.6CVSS7.8AI score0.10295EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.8 views

The vulnerability of the installer component of the WPS Office office software package allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the installer component of the WPS Office office software package is related to the loading of a non-existent dynamic library, shcore.dll. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7.8CVSS7.5AI score0.00825EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/28 12:0 a.m.12 views

The vulnerability of the installer component of the WPS Office office software package allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the installer component of the WPS Office office software package is related to the loading of a dynamic library that does not exist. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7.8CVSS7.5AI score0.00825EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/03/25 9:15 p.m.9 views

CVE-2022-26659

Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log...

7.1CVSS5.5AI score0.00432EPSS
SaveExploits0References3
NVD
NVD
added 2022/03/25 9:15 p.m.27 views

CVE-2022-26659

Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log...

7.1CVSS0.00432EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/03/25 9:15 p.m.5 views

CVE-2022-26659

Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docker Desktop installer, when run elevated, will write its log...

7.1CVSS7AI score0.00432EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2022/03/25 12:0 a.m.6 views

PT-2022-17991 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.6.0 Description: The issue allows an attacker to overwrite administrator-writable files by creating a symlink where the installer writes its log file. This can be exploited when the Docker Desktop installer ...

7.1CVSS6.8AI score0.00432EPSS
SaveExploits0References8
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/25 12:0 a.m.112 views

Quest KACE System Management Appliance Remote Command Execution Vulnerability

The '/common/downloadagentinstaller.php' script in the Quest KACE System Management Appliance is accessible by anonymous users and can be abused to perform remote code execution...

10CVSS5.1AI score0.91778EPSS
SaveIn wildExploits7
BDU FSTEC
BDU FSTEC
added 2022/03/23 12:0 a.m.9 views

The vulnerability of the Windows Installer component of the Microsoft Windows operating system allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the Windows Installer component of the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to bypass security restrictions and enhance their privileges...

7.8CVSS7.2AI score0.00666EPSS
SaveExploits0References4
Rows per page
Query Builder