CVE-2020-12304

CVE-2020-12304 affects Intel(R) DAL SDK installer on Windows prior to v2.1. The vulnerability is an improper access control flaw that could let an authenticated local user escalate privileges. Public documents consistently describe local elevated-privilege risk; exploitation details are not provi...

CVE-2020-12304

Improper access control in Installer for IntelR DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enable escalation of privileges via local access...

CVE-2020-12297

Improper access control in Installer for IntelR CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel TXE 3.1.80, 4.0.30 may allow an authenticated user to potentially enable escalation of privileges via local access...

Intel Media SDK Elevation of Privilege Vulnerability

Intel Media SDK is a multimedia SDK Software Development Kit from Intel Corporation. The product is mainly used for video encoding, decoding and processing in Windows and embedded Linux applications. An elevation of privilege vulnerability exists in versions prior to Intel Media SDK for Windows...

PT-2020-4977 · Intel · Intel Data Center Manager Console

Name of the Vulnerable Software and Affected Versions: Intel Data Center Manager Console versions prior to 3.6.2 Description: The issue is related to improper permissions in the installer for the Intel Data Center Manager Console, which may allow an authenticated user to potentially enable...

Intel® Media SDK for Windows* Advisory

Summary: A potential security vulnerability in the Intel® Media SDK for Windows may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11121 Description: Improper file permissions in the installer for...

Intel® Falcon 8+ UAS AscTec Thermal Viewer Advisory

Summary: A potential security vulnerability in the Intel® Falcon 8+ UAS AscTec Thermal Viewer may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Falcon 8+ UAS AscTec Thermal...

Intel® HID Event Filter Driver Advisory

Summary: A potential security vulnerability in the Intel® Human Interface Device HID Event Filter Driver may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVEID: CVE-2020-12332 Description: Improper permissions i...

Intel® Battery Life Diagnostic Tool Advisory

Summary: A potential security vulnerability in the Intel® Battery Life Diagnostic Tool may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details CVEID:CVE-2020-12346 Description: Improper permissions in the installer for...

Ghimob: a Tétrade threat actor moves to infect mobile devices

Guildma, a threat actor that is part of the Tétrade family of banking trojans, has been working on bringing in new techniques, creating new malware and targeting new victims. Recently, their new creation, the Ghimob banking trojan, has been a move toward infecting mobile devices, targeting...

openSUSE Security Update : chromium (openSUSE-2020-1831)

This update for chromium fixes the following issues : - Update to 86.0.4240.183 boo1178375 - CVE-2020-16004: Use after free in user interface. - CVE-2020-16005: Insufficient policy enforcement in ANGLE. - CVE-2020-16006: Inappropriate implementation in V8 - CVE-2020-16007: Insufficient data...

CVE-2020-24433 Adobe Acrobat Reader DC Local Privilege Escalation via Installer Component

Adobe Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by a local privilege escalation vulnerability that could enable a user without administrator privileges to delete arbitrary files and potentially execute arbitrary...

Security update for chromium, gn (important)

openSUSE Security Update: Security update for chromium, gn Announcement ID: openSUSE-SU-2020:1829-1 Rating: important References: 1177408 1177936 1178375 Cross-References: CVE-2020-15967 CVE-2020-15968 CVE-2020-15969 CVE-2020-15970 CVE-2020-15971 CVE-2020-15972 CVE-2020-15973 CVE-2020-15974...

CVE-2020-16007

Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted filesystem...

CVE-2020-16007

Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted filesystem...

UBUNTU-CVE-2020-16007

Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted filesystem...

CVE-2020-16007

CVE-2020-16007 is a vulnerability in the Chromium/Google Chrome installer: insufficient data validation in the installer can allow a local attacker to elevate privileges via a crafted filesystem. Public advisories indicate the fix was shipped in Chrome/Chromium around version 86.0.4240.183 (with ...

CVE-2020-16007

Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted filesystem...

CVE-2020-16007

Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted filesystem...

CVE-2020-27992

Dr.Fone 3.0.0 allows local users to gain privileges via a Trojan horse DriverInstall.exe because %PROGRAMFILESX86%\Wondershare\dr.fone\Library\DriverInstaller has Full Control for BUILTIN\Users...