chromium-browser: Inappropriate implementation in installer

Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crafted registry entry...

MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation

Exploit Title: MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation Author: nu11secur1ty Date: 2020-02-14 Vendor: Microsoft Link: https://github.com/nu11secur1ty/Windows10Exploits/tree/master/Undefined/CVE-2020-0683/nu11secur1ty CVE: CVE-2020-0683 + Credits: Ventsislav...

The vulnerability of the Intel Raid Web Console 2 installer allows a hacker to increase their privileges.

The vulnerability of the Intel Raid Web Console 2 installer is related to incorrect standard resolutions. Exploiting this vulnerability can allow attackers to increase their privileges...

Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2020-16837)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. A privilege extraction vulnerability exists in Microsoft Windows Installer. An attacker could use this vulnerability to bypass access restrictions to add or delete files...

CVE-2020-0563

Improper permissions in the installer for IntelR MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0564

Improper permissions in the installer for IntelR RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0563

Improper permissions in the installer for IntelR MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0564

Improper permissions in the installer for IntelR RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0562

Improper permissions in the installer for IntelR RWC2, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for IntelR RWC2, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for IntelR RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for IntelR MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0562

CVE-2020-0562 concerns Intel(R) RAID Web Console 2 (RWC2). The issue is improper installer permissions that may let an authenticated local user escalate privileges. Intel’s advisory (Intel® RWC2 Advisory, Intel-SA-00339) confirms affected product: all versions of RWC2, with a CVSSv3.1 base score ...

CVE-2020-0562

Improper permissions in the installer for IntelR RWC2, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0563

Affected software/component: Intel® MPSS (Manycore Platform Software Stack) prior to version 3.8.6. Root cause / vulnerability type: Improper permissions in the installer that could allow an authenticated local user to escalate privileges. Impact: Local privilege escalation with high/severe impac...

CVE-2020-0563

Improper permissions in the installer for IntelR MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0564

CVE-2020-0564 affects Intel® RAID Web Console 3 (RWC3) for Windows prior to 7.010.009.000. The root cause is improper permissions in the installer, which could allow an authenticated user to escalate privileges via local access. Intel’s advisory (INTEL-SA-00341) confirms the vulnerability and pro...

CVE-2020-0564

Improper permissions in the installer for IntelR RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for the IntelR Renesas ElectronicsR USB 3.0 Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0560

CVE-2020-0560 affects the Intel Renesas Electronics USB 3.0 Driver (all versions). The root cause is improper permissions in the installer, enabling an authenticated local user to potentially escalate privileges. Intel issued a product discontinuation and recommends uninstalling the driver. The a...