Intel Wireless Bluetooth 安全漏洞

Intel Wireless Bluetooth is a driver tool from Intel USA that can effectively solve some problems with intel bluetooth in win10 system. Intel Wireless Bluetooth has a security vulnerability that stems from a potential security flaw in the installer of some Intel Wireless Bluetooth and Killer...

CVE-2021-41379

Windows Installer Elevation of Privilege Vulnerability Recent assessments: NinjaOperator at November 22, 2021 3:59pm UTC reported: According to Florian Roth: “You can detect the exploitation of Windows InstallerFileTakeOver LPE CVE-2021-41379 with the published PoC with events from the...

Intel NUC 访问控制错误漏洞

The Intel NUC is a small mini computer from Intel USA. An Access Control Error vulnerability exists in the Intel NUC M15 Laptop Kit Serial IO driver pack, which stems from a default privilege management error in the product's installer. An attacker could use this vulnerability to cause a denial o...

Intel NUC 授权问题漏洞

The Intel NUC is a small mini computer from Intel USA. An authorization issue vulnerability exists in the Intel NUC HDMI Firmware Update Tool, which originates from a privilege management error in the product's installer. An attacker could cause privilege escalation through this vulnerability...

Content Spoofing

chrome is vulnerable to content spoofing. The vulnerability exists due to an Inappropriate implementation in WebApp Installer in Google Chrome...

coreos-installer bug fix and enhancement update

An update is available for coreos-installer. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

coreos-installer bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Description of the security update for Office 2013: November 9, 2021 (KB5002035)

Description of the security update for Office 2013: November 9, 2021 KB5002035 Summary This security update resolves a Microsoft Excel security feature bypass vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-42292. Note: To apply th...

Windows Installer Elevation of Privilege Vulnerability

...

Intel® Wireless Bluetooth® and Killer™ Bluetooth® Advisory

Summary: Potential security vulnerabilities in the installer for some Intel® Wireless Bluetooth® and Killer™ Bluetooth® products may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...

PT-2021-4794

Name of the Vulnerable Software and Affected Versions Microsoft Windows Installer versions prior to the fixed version Description The vulnerability is related to an elevation-of-privilege issue in the Windows Installer component, allowing attackers to gain administrative privileges. This issue...

Microsoft Windows Installer 后置链接漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. An elevation of privilege vulnerability exists in Microsoft Windows Installer, which can be exploited by an attacker to elevate...

KLA12345 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation...

KLA12341 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of...

GHSA-862G-9H5M-M3QV coreos-installer < 0.10.0 writes world-readable Ignition config to installed system

Impact On systems installed with coreos-installer before 0.10.0, the user-provided Ignition config was written to /boot/ignition/config.ign with world-readable permissions, granting unprivileged users access to any secrets included in the config. Default configurations of Fedora CoreOS and RHEL...

coreos-installer < 0.10.0 writes world-readable Ignition config to installed system

Impact On systems installed with coreos-installer before 0.10.0, the user-provided Ignition config was written to /boot/ignition/config.ign with world-readable permissions, granting unprivileged users access to any secrets included in the config. Default configurations of Fedora CoreOS and RHEL...

PT-2021-22427 · Unknown · Coreos-Installer

Name of the Vulnerable Software and Affected Versions: coreos-installer versions prior to 0.10.0 Description: A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions. This flaw allows a local attacker to have read...

coreos-installer: incorrect signature verification on gzip-compressed install images

An improper signature verification vulnerability was found in coreos-installer. A specially crafted gzip installation image can bypass the image signature verification and as a consequence can lead to the installation of unsigned content. An attacker able to modify the original installation image...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.6.49 security update

Red Hat OpenShift Container Platform release 4.6.49 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.6. Red Hat Product Security has rated this update as having a...

Cisco HyperFlex HX Data Platform Command Injection Vulnerability

Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user...