Spoofing

PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

CVE-2022-26488

In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabl...

CVE-2022-24931

Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbitrary activity without a proper permission...

CVE-2022-24618

Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unprivileged local users to elevate privileges to SYSTEM via the "Browse For Folder" window accessible by triggering a "Repair" on the MSI package located in C:\Windows\Installer...

CVE-2022-24618

Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unprivileged local users to elevate privileges to SYSTEM via the "Browse For Folder" window accessible by triggering a "Repair" on the MSI package located in C:\Windows\Installer...

coreos-installer: incorrect signature verification on gzip-compressed install images

An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to modify the original installation image...

Heimdal Premium Security 安全漏洞

Heimdal Premium Security is an antivirus security software from the Danish company Heimdal. A security vulnerability exists in Heimdal Premium Security 2.5.395 and earlier versions, which stems from an insecure privilege setting in the Heimdal.Wizard.exe installer. The vulnerability can be...

Wearable Manager Installer 安全漏洞

Wearable Manager Installer is a wearable device manager on Android. A security vulnerability exists in Wearable Manager Installer that allows a local attacker to perform unauthorized actions by hijacking a PendingIntent...

CVE-2022-23296

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-23296

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-23296

Windows Installer Elevation of Privilege Vulnerability...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-23296

Public technical details for CVE-2022-23296 are not provided in the connected documents. The sources list the CVE and references but do not specify affected product versions, root cause, exploit details, or remediation within the supplied material. Monitor for updates.

CVE-2022-23296 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2022-24618

Summary : CVE-2022-24618 affects Heimdal Premium Security (software component Heimdal.Wizard.exe) with insecure permissions on the installer, enabling a local, unprivileged user to elevate to SYSTEM by triggering a MSI repair via the Browse For Folder dialog in C:\Windows\Installer. Affected vers...

CVE-2022-25943

The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is installed...

CVE-2022-25943

The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is installed...

Installer of WPS Office for Windows misconfigures the ACL for the installation directory

Overview Installer of WPS Office for Windows misconfigures the ACL for the installation directory. When WPS Office for Windows is installed, some service program is registered to the OS, which is invoked with some administrative privilege. The installer fails to configure properly the ACL for the...

Trend Micro Password Manager Installer权限提升漏洞

Trend Micro Password Manager Installer is a password manager installer from Trend Micro, Inc. An elevation of privilege vulnerability exists in Trend Micro Password Manager Installer, which can be exploited by attackers to elevate privileges on the affected machine using specially crafted files...

Printix Client 1.3.1106.0 - Privilege Escalation

Exploit Title: Printix Client 1.3.1106.0 - Privilege Escalation Date: 3/2/2022 Exploit Author: Logan Latvala Vendor Homepage: https://printix.net Software Link: https://software.printix.net/client/win/1.3.1106.0/PrintixClientWindows.zip Version: = 1.3.1106.0 Tested on: Windows 7, Windows 8, Windo...