PT-2019-4015 · Palo Alto Networks · Globalprotect Agent For Windows

Name of the Vulnerable Software and Affected Versions: GlobalProtect Agent for Windows versions 5.0.3 and earlier GlobalProtect Agent for Windows versions 4.1.12 and earlier Description: A Local Privilege Escalation issue exists in the auto-update feature of the GlobalProtect Agent for Windows,...

CVE-2019-10210

Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file...

Input validation

Improper file permission in software installer for IntelR Smart Connect Technology for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11167

CVE-2019-11167 affects Intel Smart Connect Technology for Intel NUC. Root cause: improper file permissions in the software installer, enabling an authenticated local user to escalate privileges via local access. According to the Intel advisory, the vendor does not provide patches and recommends u...

CVE-2019-11167

Improper file permission in software installer for IntelR Smart Connect Technology for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11120

CVE-2019-11120: Intel Active System Console (for Intel Server Boards and Systems on 62X chipset) prior to 8.0 Build 24 is affected by insufficient installer path checking, enabling an authenticated, local attacker to escalate privileges. Multiple sources (Intel advisory, Red Hat CVE entry, CNVD, ...

Exploit for Use After Free in Google Android

qu1ckr00t A PoC application demonstrating the power of an Andr...

CVE-2019-3652

Code Injection vulnerability in EPSetup.exe in McAfee Endpoint Security ENS Prior to 10.6.1 October 2019 Update allows local user to get their malicious code installed by the ENS installer via code injection into EPSetup.exe by an attacker with access to the installer...

Description of the security update for Office 2016: October 8, 2019

None None...

CVE-2019-16407

JetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability...

October 1, 2019, update for Outlook 2013 (KB4484096)

October 1, 2019, update for Outlook 2013 KB4484096 This article describes update 4484096 for Microsoft Outlook 2013 that was released on October 1, 2019. This update also applies to Office Home and Student 2013 RT.Be aware that the update in the Microsoft Download Center applies to the Microsoft...

Privilege escalation

The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivileged users or malware. If the Mozilla Maintenance Service is manipulated to update this unprotected location and the updated maintenance service in the...

CVE-2019-11753

The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivileged users or malware. If the Mozilla Maintenance Service is manipulated to update this unprotected location and the updated maintenance service in the...

CVE-2019-11753

CVE-2019-11753 affects Firefox on Windows where the installer can place Firefox in a user-writable location. The underlying issue is lack of integrity checks in the Mozilla Maintenance Service during updates, allowing a locally replaced executable in the unprotected path to run with elevated priv...

CVE-2019-11753

The Firefox installer allows Firefox to be installed to a custom user writable location, leaving it unprotected from manipulation by unprivileged users or malware. If the Mozilla Maintenance Service is manipulated to update this unprotected location and the updated maintenance service in the...

Intel Easy Streaming Wizard Elevation of Privilege Vulnerability

Intel Easy Streaming Wizard is a set of streaming media delivery live configuration software from Intel USA. A privilege vulnerability exists in the installer in versions of Intel Easy Streaming Wizard prior to 2.1.0731, which stems from a failure to have the correct file permissions. A local...

Intel Remote Displays SDK Elevation of Privilege Vulnerability

Intel Remote Displays SDK is a teleprocessing software development kit SDK from Intel USA. The product enables low-latency capture, compression, decompression, and configuration of virtual displays. An elevation of privilege vulnerability exists in the installer in versions of Intel Remote Displa...

Intel Authenticate Elevation of Privilege Vulnerability

Intel Authenticate is a set of multi-factor authentication software from the U.S. company Intel Intel. An elevation of privilege vulnerability exists in the software installer in versions prior to Intel Authenticate 3.8. A local attacker could exploit this vulnerability to gain elevation of...

The vulnerability of the Windows Store Installer component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows Store Installer component of the Windows operating system is related to errors in handling symbolic links. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2019-11166

Improper file permissions in the installer for IntelR Easy Streaming Wizard before version 2.1.0731 may allow an authenticated user to potentially enable escalation of privilege via local attack...