Trend Micro Apex One 缓冲区错误漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One suffers from a buffer error vulnerability that stems from its Unauthorized Change Prevention service that allows a local attacker to elevate the privileges of the affected installer...

Trend Micro Apex One 路径遍历漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One suffers from a path traversal vulnerability that originates from a security agent of its Apex One service that allows a local attacker to escalate the privileges of the installer via path traversal...

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from its Apex One service mishandling an exception condition allowing a local attacker to escalate the privileges of the installer...

The vulnerability of the client installer for conducting real-time audio and video conferences in Zoom Client for Meetings for macOS, allowing a intruder to escalate their privileges.

The vulnerability of the client installer for conducting real-time audio and video conferences in Zoom Client for Meetings for macOS stems from a state of resource copying competition during the process. Exploiting this vulnerability can allow an intruder to enhance their privileges...

Trend Micro Apex One 缓冲区错误漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One suffers from a buffer error vulnerability that stems from its Unauthorized Change Prevention service that allows a local attacker to exploit memory corruption to elevate the privileges of the installer...

The vulnerability of the RealVNC remote access software relates to insecure management of privileges, allowing a hacker to elevate their own privileges.

The vulnerability of the RealVNC remote access software is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges by using the MSI installer Repair feature...

Zabbix 安全漏洞

Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring, and application monitoring. A security vulnerability exists in Zabbix that stems from the installation of the Zabbix proxy MSI, which creates a firewall rule in...

Malicious code in man-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56d12d9a70c6fed6bf0d505f094550612014e752bb9b9ef0742b127c1dc65de8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4470 Malicious code in man-installer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56d12d9a70c6fed6bf0d505f094550612014e752bb9b9ef0742b127c1dc65de8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Trend Micro Apex One Improper Handling of Exceptional Conditions Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Qt 代码问题漏洞

Qt is a cross-platform C++ application development framework from the Norwegian company Qt. It is widely used to develop GUI programs, in which case it is also known as the widget toolkit. It can also be used to develop non-GUI programs, such as console tools and servers. A security vulnerability...

CVE-2022-31694

InstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the installer binary parent directory when displaying popups. This may allow an attacker to plant a malicious DLL in the installer parent directory to allow executing code with the privileges of the installer...

CVE-2022-36924

The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user...

CVE-2022-28768

The Zoom Client for Meetings Installer for macOS Standard and for IT Admin before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root...

CVE-2022-28768

The Zoom Client for Meetings Installer for macOS Standard and for IT Admin before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root...

Privilege escalation

The Zoom Client for Meetings Installer for macOS Standard and for IT Admin before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root...

CVE-2022-36924 Local Privilege Escalation in Zoom Rooms Installer for Windows

The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user...

CVE-2022-36924

Vulnerability summary (CVE-2022-36924) : Zoom Rooms Installer for Windows prior to version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this during the installation process to elevate privileges to SYSTEM. The PT Security entry notes an und...

CVE-2022-28768 Local Privilege Escalation in Zoom Client Installer for macOS

The Zoom Client for Meetings Installer for macOS Standard and for IT Admin before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root...

CVE-2022-28768

The CVE-2022-28768 entry affects Zoom Client for Meetings Installer for macOS prior to version 5.12.6. The root cause is a race condition during the copying of resources in the installer, allowing a local low-privileged user to escalate to root during installation. Affected software: Zoom Client ...