CVE-2021-0302

In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9...

CVE-2021-23880 Improper Access Control in the ENS installer

Improper Access Control in attribute in McAfee Endpoint Security ENS for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters...

Microsoft Windows Multiple Vulnerabilities (KB4601315)

This host is missing a critical security update according to Microsoft KB4601315 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4601331)

This host is missing a critical security update according to Microsoft KB4601331 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4601318)

This host is missing a critical security update according to Microsoft KB4601318 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4601354)

This host is missing a critical security update according to Microsoft KB4601354 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4601384)

This host is missing a critical security update according to Microsoft KB4601384 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4601319)

This host is missing a critical security update according to Microsoft KB4601319 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4601347)

This host is missing a critical security update according to Microsoft KB4601347 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Windows Installer Elevation of Privilege Vulnerability

...

Intel® SSD Toolbox Advisory

Summary: A potential security vulnerability in the Intel® Solid State Drive SSD Toolbox may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has replaced it with the Intel® Memory and Storage MAS Tool. Vulnerability Details: CVEID:...

PT-2021-2088

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Installer component of Microsoft Windows operating systems. This can allow an attacker to elevate their...

KLA12075 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions. Below is a complete list of...

Intel® RealSense™ DCM Advisory

Summary: A potential security vulnerability in the Intel® RealSense™ Depth Camera Manager DCM may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8765 Description: Incorrect default permissions in...

Intel Optane(TM) DC Security Vulnerability

Intel OptaneTM DC is a software application from Intel Corporation USA. It provides a new storage technology. A security vulnerability exists in Intel OptaneTM DC Persistent Memory installer for Windows, which arises from an uncontrolled search path in the installer that could allow an...

Microsoft Windows Installer Security Feature Issue Vulnerability

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security feature vulnerability exists in Microsoft Windows Installer. The following products and editions are affected: Windows 10...

Vulnerabilities fixed in Microsoft Windows

Microsoft fixes multiple vulnerabilities in Windows. A malicious party could potentially exploit the vulnerabilities to: - cause a denial-of-service, - bypass security measures, - execute arbitrary code, - obtain elevated privileges, - gain access to sensitive data. Below is a summary of the...

Intel RealSense DCM Security Vulnerability

A security vulnerability exists in Intel RealSense DCM that stems from incorrect default permissions in the installer, which could allow a privileged user to escalate privileges via local access...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.6.16 security and bug fix update

Red Hat OpenShift Container Platform release 4.6.16 is now available with updates to packages and images that fix several bugs. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

HPSBHF03715 rev. 1 - Intel® Optane™ DC Persistent Memory Software February 2021 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® Optane™ DC Persistent Memory installer for Windows Server 2019 which m...