CVE-2019-2218

In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing permission check. This could lead to local escalation of privilege by installing malicious packages with User execution privileges needed. User interaction is not needed for...

CVE-2019-19364

A weak malicious user can escalate its privilege whenever CatalystProductionSuite.2019.1.exe version 1.1.0.21 and CatalystBrowseSuite.2019.1.exe version 1.1.0.21 installers run. The vulnerability is in the form of DLL Hijacking. The installers try to load DLLs that don’t exist from its current...

The vulnerability of the ActiveX Installer component of the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ActiveX Installer component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

Xunjie CAD Viewing Software installer is vulnerable to dll hijacking

Xunjie CAD viewing software is a CAD drawing viewing tool, can be detached from the AutoCAD environment on the DWG, DXF files for fast browsing. A dll hijacking vulnerability exists in the installation program of Xunjie CAD Viewer. An attacker can exploit the vulnerability to execute arbitrary co...

STAMP Workbench installer may insecurely load Dynamic Link Libraries

Overview STAMP Workbench is a modeling tool for STAMP provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA. It is distirbuted as a ZIP archive or an Windows executable installer. The Windows executable installer contains an issue with the DLL search path, which may lead to insecurely...

STAMP Workbench Installer Code Issue Vulnerability

STAMP Workbench is a modeling tool that supports support for STAMP Systems Theory Accident Models and Processes/STPA Systems Theory Process Analysis. A code issue vulnerability exists in the STAMP Workbench installer that can be exploited by an attacker to cause unsafe loading of dynamic link...

JVN#19386781: STAMP Workbench installer may insecurely load Dynamic Link Libraries

STAMP Workbench is a modeling tool for STAMP provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA. It is distirbuted as a ZIP archive or an Windows executable installer. The Windows executable installer contains an issue with the DLL search path, which may lead to insecurely loading...

CVE-2019-13702

Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable...

Privilege escalation

Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable...

CVE-2019-13702

Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable...

UBUNTU-CVE-2019-13702

Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable...

CVE-2019-13702

CVE-2019-13702 affects Google Chrome on Windows with an insecure installer implementation that allowed privilege escalation via a crafted executable. The vulnerability originates from an inappropriate installer implementation, enabling local attackers to elevate privileges. Public advisories conf...

CVE-2019-13702

Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable...

CVE-2019-13702

Inappropriate implementation in installer in Google Chrome on Windows prior to 78.0.3904.70 allowed a local attacker to perform privilege escalation via a crafted executable...

JetBrains ReSharper DLL Hijacking Vulnerability

JetBrains ReSharper is a Visual Studio extension for .NET development from the Czech company JetBrains. NET development. The program is mainly used for code quality analysis, code error alerts, etc. installers is the installation program for JetBrains ReSharper. This program is mainly used for co...

McDonalds-Themed Facebook Ads Serve Up Banking Trojans

The Mispadu banking trojan is using a McDonalds malvertising tactic to ultimately steal payment-card data and online banking information. Written in Delphi, Mispadu targets Brazil and Mexico, uses pop-up windows and contains backdoor functionality. According to researchers at ESET, Mispadu spread...

December 4, 2018, update for Office 2010 (KB4461579)

December 4, 2018, update for Office 2010 KB4461579 This article describes update 4461579 for Microsoft Office 2010 that was released on December 4, 2018. Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based edition of Office 2010. It doesn't appl...

CVE-2019-14602

Improper permissions in the installer for the Nuvoton CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14602

Improper permissions in the installer for the Nuvoton CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for the Nuvoton CIR Driver versions 1.02.1002 and before may allow an authenticated user to potentially enable escalation of privilege via local access...