9818 matches found
Epic Games Launcher code-related vulnerabilities
Epic Games Launcher is a game software launcher from Epic Games USA. A code issue vulnerability exists in Epic Games Launcher version 17.2.1 and earlier, which stems from code in the profapi.dll library in the component Installer that can lead to untrusted search paths...
CVE-2025-0567: Untrusted Search Path
A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally is a requirement. The complexity of an attack ...
Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2025-02836)
Microsoft Windows Installer is a component of the Windows operating system from Microsoft USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...
Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2025-02835)
Microsoft Windows Installer is a component of the Windows operating system from Microsoft USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...
PT-2025-3754 · Zoom · Zoom Workplace App For Windows
Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: The issue concerns an untrusted search path in the installer for some Zoom Workplace Apps for Windows. This could allow an authorized user to conduct an escalation o...
App Package Installer Privilege Escalation
The vulnerability of the App Package Installer installation program for Microsoft Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...
Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...
Windows Installer Privilege Escalation
The vulnerability of the Windows Installer component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...
CVE-2025-21331
Windows Installer Elevation of Privilege Vulnerability...
CVE-2025-21331
Windows Installer Elevation of Privilege Vulnerability...
CVE-2025-21287
Windows Installer Elevation of Privilege Vulnerability...
CVE-2025-21275
Windows App Package Installer Elevation of Privilege Vulnerability...
CVE-2025-21331
CVE-2025-21331 is a Windows Installer Elevation of Privilege vulnerability. The connected documents confirm it is a local privilege escalation (attack vector: LOCAL, requires LOW privileges and USER interaction) with high impact (C:H/I:H/A:H) per CVSS 3.1. Public details in the NCSC advisory cate...
CVE-2025-21331 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2025-21331 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2025-21287
CVE-2025-21287 is a Windows Installer elevation of privilege vulnerability. The linked documents confirm this CVE affects the Windows Installer component in Windows OS, enabling a local attacker with low privileges and no user interaction to elevate privileges. Remediation is provided by Microsof...
CVE-2025-21287 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2025-21287 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2025-21275
Technical details about CVE-2025-21275 (Windows App Package Installer Elevation of Privilege) are not provided in the supplied documents. Public specifics on affected product/version/root cause/impact/fix are not available here; monitor for authoritative updates from Microsoft/CVE records.