CVE-2024-45417

Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access...

CVE-2024-45417

Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access...

CVE-2024-45418

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2024-45418 Zoom Apps for macOS - Symbolic Link Following

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2024-45417

Zoom Apps for macOS is affected by CVE-2024-45417 due to uncontrolled resource consumption in the installer prior to version 6.1.5. A privileged local user could leverage this to disclose information. The available details indicate the impact is information disclosure with local access, and remed...

Zoom Workplace security vulnerabilities

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace versions prior to 6.1.5, which stems from uncontrolled resource consumption by the installer and could lead to the disclosure of information via local access by privileged users...

Zoom Workplace security vulnerabilities

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace versions prior to 6.1.5, which stems from the installer symbolic link following, and could lead to elevation of privilege by an authenticated user via network access...

CVE-2024-45417: Incorrect Ownership Assignment

Uncontrolled resource consumption in the installer for some Zoom apps for macOS before version 6.1.5 may allow a privileged user to conduct a disclosure of information via local access...

Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...

CVE-2024-32942

Incorrect default permissions for some IntelR DSA installer for Windows before version 24.2.19.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-21373

Windows Installer Elevation of Privilege Vulnerability...

CVE-2025-21206

Visual Studio Installer Elevation of Privilege Vulnerability...

CVE-2025-0426

A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk...

[SECURITY] Fedora 40 Update: rust-coreos-installer-0.23.0-2.fc40

coreos-installer installs Fedora CoreOS or RHEL CoreOS to bare-metal machines or, occasionally, to virtual machines...

Microsoft Visual Studio Installer Privilege Escalation

The vulnerability of the installer of the Microsoft Visual Studio software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...

CVE-2024-42419

Incorrect default permissions for some IntelR GPA and IntelR GPA Framework software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32942

Incorrect default permissions for some IntelR DSA installer for Windows before version 24.2.19.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-30211

Improper access control in some IntelR ME driver pack installer engines before version 2422.6.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32942

Incorrect default permissions for some IntelR DSA installer for Windows before version 24.2.19.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32942

CVE-2024-32942 affects Intel® DSA (Driver & Support Assistant) installer for Windows. The vulnerability arises from incorrect default permissions (misconfiguration of default privileges) in Intel DSA installers prior to version 24.2.19.5, which may allow an authenticated user to escalate privileg...