chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 10 security fixes, including: 1138911 High CVE-2020-16004: Use after free in user interface. Reported by Leecraso and Guang Gong of 360 Alpha Lab working with 360 BugCloud on 2020-10-15 1139398 High CVE-2020-16005: Insufficient policy enforcement in...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Z Development and Test Environment - April 2020

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 that is used by IBM Z Development and Test Environment. These issues were disclosed as part of the IBM Java SDK updates in October 2019 CVE-2019-2989, in January 2020 CVE-2020-2593, CVE-2020-2654 and in Apr...

The vulnerability of the installer for microprogramming software for Intel RealSense D400 Series UWP cameras allows a intruder to gain increased privileges.

The vulnerability of the installer for microprogramming software for Intel RealSense D400 Series UWP cameras is related to errors in the use of standard resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Intel Mailbox Interface driver installer allows attackers to increase their privileges.

The vulnerability of the Intel Mailbox Interface driver installer is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...

[SECURITY] Fedora 32 Update: calamares-3.2.11-14.fc32

Calamares is a distribution-independent installer framework, designed to in stall from a live CD/DVD/USB environment to a hard disk. It includes a graphical installation program based on Qt 5. This package includes the Calamares framework and the required configuration files to produce a working...

Fedora: Security Advisory for calamares (FEDORA-2020-da859aadde)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for calamares (FEDORA-2020-73471e6414)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 33 Update: calamares-3.2.11-14.fc33

Calamares is a distribution-independent installer framework, designed to in stall from a live CD/DVD/USB environment to a hard disk. It includes a graphical installation program based on Qt 5. This package includes the Calamares framework and the required configuration files to produce a working...

USN-4601-1 python-pip vulnerability

It was discovered that pip did not properly sanitize the filename during pip install. A remote attacker could possible use this issue to read and write arbitrary files on the host filesystem as root, resulting in a directory traversal attack. CVE-2019-20916...

McAfee Privilege Escalation Vulnerability

McAfee Application and Change Control MACC is a security threat monitoring system of the United States McAfee McAfee. McAfee has a security vulnerability that can be exploited by an attacker to bypass restrictions and escalate his privileges through the McAfee application's Installer Control and...

CVE-2020-15264

The Boxstarter installer before version 2.13.0 configures C:\ProgramData\Boxstarter to be in the system-wide PATH environment variable. However, this directory is writable by normal, unprivileged users. To exploit the vulnerability, place a DLL in this directory that a privileged service is looki...

CVE-2020-15264

The CVE-2020-15264 issue affects the Boxstarter installer prior to version 2.13.0, which places C:\ProgramData\Boxstarter on the system PATH. The directory is writable by non-privileged users, enabling DLL loading by a privileged service through a DLL such as WptsExtensions.dll. When Windows star...

KB2793634 - Windows Installer starts repeatedly after you install SQL Server 2012 SP1

KB2793634 - Windows Installer starts repeatedly after you install SQL Server 2012 SP1 Symptoms After you install SQL Server 2012 SP1 on a computer, the Windows Installer Msiexec.exe process is repeatedly started to repair certain assemblies. Additionally, the following events are logged in the...

The vulnerability of Windows operating system installers allows a hacker to increase their privileges.

The vulnerability of Windows operating system installers exists due to insufficient checks on input data. Exploiting this vulnerability can allow attackers to increase their privileges...

APSB20-68 Security update available for Adobe Creative Cloud Desktop Application

Adobe has released a security update for the Creative Cloud Desktop Application installer for Windows. This update resolves a critical vulnerability in the installer that could lead to arbitrary code execution...

CVE-2020-16902

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then...

CVE-2020-16902

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then...

Privilege escalation

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior. A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then...

CVE-2020-16902 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2020-16902

CVE-2020-16902 is a Windows Installer elevation-of-privilege vulnerability. The Windows Installer fails to properly sanitize input, causing insecure library loading. A locally authenticated attacker could execute arbitrary code with elevated privileges and gain full control (install/modify data, ...