CVE-2019-17435

A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installatio...

Local Privilege Escalation in GlobalProtect App for Windows

A Local Privilege Escalation vulnerability exists in the GlobalProtect App for Windows auto-update feature that can allow for modification of a GlobalProtect App MSI installer package on disk before installation. Ref GPC-8977, CVE-2019-17435 Successful exploitation of this issue may allow a...

PT-2019-4015 · Palo Alto Networks · Globalprotect Agent For Windows

Name of the Vulnerable Software and Affected Versions: GlobalProtect Agent for Windows versions 5.0.3 and earlier GlobalProtect Agent for Windows versions 4.1.12 and earlier Description: A Local Privilege Escalation issue exists in the auto-update feature of the GlobalProtect Agent for Windows,...

Intel Active System Console Elevation of Privilege Vulnerability

Intel Active System Console is an active system console application from Intel Corporation USA. A security vulnerability exists in the installer in versions prior to Intel Active System Console 8.0 Build 24, which stems from the program not performing sufficient path checking. An attacker could...

CVE-2019-10210

Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file...

Input validation

Improper file permission in software installer for IntelR Smart Connect Technology for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11167

Improper file permission in software installer for IntelR Smart Connect Technology for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11167

CVE-2019-11167 affects Intel Smart Connect Technology for Intel NUC. Root cause: improper file permissions in the software installer, enabling an authenticated local user to escalate privileges via local access. According to the Intel advisory, the vendor does not provide patches and recommends u...

CVE-2019-11120

CVE-2019-11120: Intel Active System Console (for Intel Server Boards and Systems on 62X chipset) prior to 8.0 Build 24 is affected by insufficient installer path checking, enabling an authenticated, local attacker to escalate privileges. Multiple sources (Intel advisory, Red Hat CVE entry, CNVD, ...

Exploit for Use After Free in Google Android

qu1ckr00t A PoC application demonstrating the power of an Andr...

CVE-2019-3652

Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security ENS Prior to 10.6.1 October 2019 Update allows local user to get their malicious code installed by the ENS installer via code injection into EPSetup.exe by an attacker with access to the installer...

Description of the security update for Office 2016: October 8, 2019

None None...

CVE-2019-16407

JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability...

October 1, 2019, update for Outlook 2013 (KB4484096)

October 1, 2019, update for Outlook 2013 KB4484096 This article describes update 4484096 for Microsoft Outlook 2013 that was released on October 1, 2019. This update also applies to Office Home and Student 2013 RT.Be aware that the update in the Microsoft Download Center applies to the Microsoft...

CVE-2019-11753

The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivileged users or malware. If the Mozilla Maintenance Service is manipulated to update this unprotected location and the updated maintenance service in the...

Privilege escalation

The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivileged users or malware. If the Mozilla Maintenance Service is manipulated to update this unprotected location and the updated maintenance service in the...

CVE-2019-11753

CVE-2019-11753 affects Firefox on Windows where the installer can place Firefox in a user-writable location. The underlying issue is lack of integrity checks in the Mozilla Maintenance Service during updates, allowing a locally replaced executable in the unprotected path to run with elevated priv...

CVE-2019-11753

The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivileged users or malware. If the Mozilla Maintenance Service is manipulated to update this unprotected location and the updated maintenance service in the...

Intel Easy Streaming Wizard Elevation of Privilege Vulnerability

Intel Easy Streaming Wizard is a set of streaming media delivery live configuration software from Intel USA. A privilege vulnerability exists in the installer in versions of Intel Easy Streaming Wizard prior to 2.1.0731, which stems from a failure to have the correct file permissions. A local...

Intel Remote Displays SDK Elevation of Privilege Vulnerability

Intel Remote Displays SDK is a teleprocessing software development kit SDK from Intel USA. The product enables low-latency capture, compression, decompression, and configuration of virtual displays. An elevation of privilege vulnerability exists in the installer in versions of Intel Remote Displa...