CVE-2024-43590

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability...

CVE-2024-43590

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability...

CVE-2024-43590 Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

...

CVE-2024-43590 Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

...

CVE-2024-43590

CVE-2024-43590 is a local elevation-of-privilege vulnerability in the Visual C++ Redistributable Installer. A local attacker with Low privileges could exploit this (UI: none) to gain High confidentiality, integrity, and availability impact, with the attack vector being local and requiring Low pri...

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability

...

Description of the security update for Excel 2016: October 8, 2024 (KB5002643)

None None...

PT-2024-10228 · Foxit · Foxit Pdf Reader

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on...

CVE-2024-43590: Improper Access Control

Visual C++ Redistributable Installer Elevation of Privilege Vulnerability...

Microsoft Visual C++ Redistributable Installer Access Control Vulnerability

Microsoft Visual C++ Redistributable Installer is an installer from Microsoft Corporation USA that is used to install the Microsoft C and C++ MSVC runtime libraries on a user's computer. An access control error vulnerability exists in Microsoft Visual C++ Redistributable Installer. An attacker...

KLA73906 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Visual C++...

CVE-2022-26488

A flaw was found in Python that may allow local users to gain privileges due to the search path being inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users an...

org.jenkins-ci.main:jenkins-test-harness (1.523), org.jenkins-ci.main:jenkins-war (1.523) +6 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.523)

org.jenkins-ci.main:jenkins-core MAVEN version 1.523 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.523 - org.jenkins-ci.main:jenkins-war 1.523 -...

org.jenkins-ci.main:jenkins-test-harness (1.498), org.jenkins-ci.main:jenkins-war (1.498) +8 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.498)

org.jenkins-ci.main:jenkins-core MAVEN version 1.498 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.498 - org.jenkins-ci.main:jenkins-war 1.498 -...

net.praqma:memory-map (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.485) +8 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.485)

org.jenkins-ci.main:jenkins-core MAVEN version 1.485 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - net.praqma:memory-map =1.0.0, =1.0, =1.1 - org.jenkins-ci.modules:slave-installer 1.0 -...

com.sonymobile.jenkins.plugins.lenientshutdown:lenientshutdown (>=1.1.0, <=1.1.1), org.jenkins-ci.main:jenkins-test-harness (1.601) +3 more potentially affected by CVE-2024-47804 via org.jenkins-ci.main:jenkins-core (1.601)

org.jenkins-ci.main:jenkins-core MAVEN version 1.601 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.sonymobile.jenkins.plugins.lenientshutdown:lenientshutdown =1.1.0, =1.0, =1.3 -...

Nitro Software Nitro PDF Pro: Permissions, Licenses, and Access Control Vulnerabilities

Nitro Software Nitro PDF Pro is a software that can be used to create and edit PDF files from Nitro Software, Inc. in the United States. A privilege license and access control issue vulnerability exists in Nitro Software Nitro PDF Pro versions 13.70.7.60 and earlier and 14.18.1.41 and earlier,...

Nitro PDF Pro Local Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Local Privilege Escalation via MSI Installer product: Nitro PDF Pro vulnerable version: 14.26.1.0 13.70.8.82 fixed version: 14.26.1.0 or higher 13.70.8.82 or higher CVE...

October 1, 2024, update for Project 2016 (KB5002638)

None None...

BlackBerry CylanceOPTICS Uninstall Password Bypass

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Uninstall Password Bypass product: BlackBerry CylanceOPTICS Windows Installer Package vulnerable version: CylanceOPTICS 3.3 MR2 CylanceOPTICS 3.2 MR5 fixed version:...