DLL Hijacking Vulnerability in WPS Installer

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. The WPS installer has a DLL hijacking vulnerability, which can be exploited by an attacke...

Input validation

Improper directory permissions in the installer for IntelR Management Engine Consumer Driver for Windows before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45,13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of...

CVE-2019-8801

A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution...

CVE-2019-14603

Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14603

Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14605

The CVE-2019-14605 affects Intel's SCS Platform Discovery Utility (all versions). The root cause is improper permissions in the installer, enabling an authenticated local user to potentially escalate privileges (local, low complexity, privilege requirement). Impact includes potentially elevated p...

CVE-2019-14605

Improper permissions in the installer for the IntelR SCS Platform Discovery Utility, all versions, may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-14603

Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14603

Intel Quadru... wait, keep precise:

PT-2019-13755 · Intel · Intel Quartus Prime Pro Edition

Name of the Vulnerable Software and Affected Versions: Intel Quartus Prime Pro Edition versions prior to 19.3 Description: The issue is related to improper permissions in the installer for the License Server software, which may allow an authenticated user to potentially enable escalation of...

The vulnerability of the installer of Intel Smart Connect Technology allows a perpetrator to enhance their privileges.

The vulnerability of the Intel Smart Connect Technology software installer is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

openSUSE Security Update : opera (openSUSE-2019-2107)

This update for opera fixes the following issues : Opera was updated to version 63.0.3368.66 : - CHR-7525 Update chromium on desktop-stable-76-3368 to 76.0.3809.132 - DNA-74031 Download indicator doesnt match progress - DNA-77042 Something went wrong message in crypto wallet in private window -...

Unspecified Vulnerability in Intel Nuvoton Consumer Infrared Driver

Intel Nuvoton Consumer Infrared CIR Driver is an infrared driver from Intel Corporation USA. A security vulnerability exists in the installer in Intel Nuvoton CIR Driver 1.02.1002 and earlier versions, which can be exploited by a local attacker to elevate privileges...

Description of the security update for Office 2010: December 10, 2019

Description of the security update for Office 2010: December 10, 2019 Summary This security update resolves an information disclosure vulnerability that exists in Microsoft Access software if the software does not correctly handle objects in memory. To learn more about the vulnerability, see...

OPENSUSE-SU-2019:2664-1 Security update for opera

This update for opera fixes the following issues: Opera was updated to version 65.0.3467.62 - CHR-7658 Update chromium on desktop-stable-78-3467 to 78.0.3904.108 - DNA-81387 Remove support for old bundle structure in signing scripts - DNA-81675 Update widevine signature localisation in signed...

The vulnerability of the automatic update function of the corporate VPN application GlobalProtect Agent for Windows allows a intruder to increase their privileges.

The vulnerability of the automatic update function of the corporate VPN application, GlobalProtect Agent for Windows, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges by loading the modified MSI installer onto the disk...

Intel® Quartus® Prime Pro Edition Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00311.html...

The vulnerability of the Windows Modules Installer Service component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Modules Installer Service component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Windows Installer component allows attackers to exploit their privileges.

The vulnerability of the Windows Installer component in operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to gain increased privileges...