Milestone XProtect Disclosure

The vulnerability of the Milestone XProtect video surveillance software installer is related to the lack of data encryption measures. Exploiting this vulnerability could allow a remote attacker to disclose the protected information...

CVE-2025-32714

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-33075

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-5335

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2025-33075

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-33075

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-32714

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-32714

Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-33075

CVE-2025-33075 affects Windows Installer and is tied to an improper link resolution before file access (a link following issue). The root cause enables a locally authenticated attacker to achieve privilege escalation (local, high impact). The NCSC advisory aggregates list CVE-2025-33075 under Win...

CVE-2025-33075 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-33075 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-32714

CVE-2025-32714 maps to an improper access control in Windows Installer enabling local privilege escalation for an authenticated attacker. Connected sources confirm Windows Installer as the vulnerable component and describe the impact as obtaining elevated privileges locally. Remediation is via Mi...

CVE-2025-32714 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-32714 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-5335

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2025-5335

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2025-5335

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2025-5335

The CVE-2025-5335 case involves Autodesk Installer, where an untrusted search path in the installer could allow a local attacker to escalate privileges to NT AUTHORITY/SYSTEM and potentially execute code. Documented impact is privilege escalation with code execution risk; exploitation status and ...

CVE-2025-5335 Privilege Ecalation due to Untrusted Search Path Vulnerability

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...

CVE-2025-5335 Privilege Ecalation due to Untrusted Search Path Vulnerability

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution...