7679 matches found
The installers of multiple Sony products may insecurely load Dynamic Link Libraries
Overview The installers of multiple Sony products contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Shogo Kumamaru of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...
JVN#80288258: The installers of multiple Sony products may insecurely load Dynamic Link Libraries
The installers of multiple Sony products contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest installer by following the...
CVE-2021-36002
Adobe Captivate version 11.5.5 and earlier is affected by an Creation of Temporary File In Directory With Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. The attacker must plant a malicious file in a particular location of the...
New Trickbot attack setup fake 1Password installer to extract data
By Waqas The fake 1Password installer is used to launch Cobalt Strike helping the attackers collect information about multiple systems in the network. This is a post from HackRead.com Read the original post: New Trickbot attack setup fake 1Password installer to extract data...
The vulnerability of the Edge Installer component of the Microsoft Edge browser allows a perpetrator to elevate their privileges and execute arbitrary code.
The vulnerability of the Microsoft Edge browser’s Edge Installer component is related to errors during the connection to directories. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
VulnCheck KEV: CVE-2021-1497
Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user...
Veeam product installer fails with "Failed to execute setup extensions."
Challenge When attempting to install or upgrade a Veeam product, the installer fails with the following error: Failed to execute setup extensions. Cause This issue is related to security software antivirus/antimalware or system hardening on the machine preventing access to or execution of files...
Security Bulletin: PostgreSQL vulnerabilities in IBM Robotic Process Automation with Automation Anywhere - CVE-2020-10733
Summary IBM Robotic Process Automation with Automation Anywhere is vulnerable to attacks involving PostgreSQL. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions ---|--- IBM Robotic Process...
The vulnerability of the Installer component of the Google Chrome web browser allows a hacker to bypass security restrictions and gain unauthorized access to protected information.
The vulnerability of the Installer component of the Google Chrome web browser is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain unauthorized access to protected information by opening a specially...
DEBIAN-CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...
CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...
CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...
CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...
UBUNTU-CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...
CVE-2021-30577
CVE-2021-30577 affects Google Chrome’s Installer component; prior to 92.0.4515.107 there is insufficient policy enforcement, enabling a remote attacker to escalate to local privileges via a crafted file. Remediation: upgrade to 92.0.4515.107 or newer. Exploitation status is not provided in the do...
CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...
CVE-2021-30577
Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file...
Privilege escalation
An issue was discovered in Comelit "App lejos de casa web" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges installer or administrator for the graphical interface via a...
Microsoft Edge Installer Directory Junction Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Edge. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within Edge Installer. By...
