CVE-2025-48500

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

CVE-2025-48500

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

CVE-2025-48500 BIG-IP APM VPN web client for macOS vulnerability

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

CVE-2025-48500

CVE-2025-48500 affects the macOS BIG-IP APM VPN browser client installer. A missing file integrity check may allow a local, authenticated attacker with local access to replace the installer with a malicious package, potentially leading to local privilege escalation. Affected versions include BIG-...

CVE-2025-48500

A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. Note: Software versions which have reached End of Technical Support...

K000151782: BIG-IP APM VPN browser client for macOS vulnerability CVE-2025-48500

Security Advisory Description A missing file integrity check vulnerability exists on the macOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. CVE-2025-48500 Impact A local,...

Fake Minecraft Installer Spreads NjRat Spyware to Steal Data

Fake Minecraft clone Eaglercraft 1.12 Offline spreads NjRat spyware stealing passwords, spying via webcam and microphone, warns Point…...

Vulnerabilities fixed in Zoom

Zoom has fixed vulnerabilities in Zoom Clients for Windows. The first vulnerability concerns an untrusted search path issue, which could allow unauthenticated remote users to elevate their privileges via network access. The second vulnerability concerns a race condition in the installer, which ca...

PT-2025-33001 · F5 · F5 Vpn

Name of the Vulnerable Software and Affected Versions: MacOS F5 VPN browser client installer affected versions not specified Description: A missing file integrity check exists in the MacOS F5 VPN browser client installer, potentially allowing a local, authenticated attacker with access to the loc...

F5 BIG-IP Edge Client 安全漏洞

F5 BIG-IP Edge Client is a secure remote access client software from F5 USA. A security vulnerability exists in F5 BIG-IP Edge Client that stems from a lack of file integrity checking and could lead to a local attacker replacing a malicious installation package...

CVE-2025-49456

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access...

CVE-2025-49456

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access...

CVE-2025-49456 Zoom Clients for Windows- Race Condition

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access...

CVE-2025-49456

CVE-2025-49456 concerns a race condition in the installer of Zoom Clients for Windows. The connected sources consistently describe that the vulnerability stems from a faulty installer process, allowing an unauthenticated local user to impact (compromise) application integrity. The affected softwa...

CVE-2025-50173

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-50173

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2025-50173 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-50173

CVE-2025-50173 is a Windows Installer local privilege-escalation vulnerability caused by weak authentication that enables an authenticated, local attacker to elevate privileges. The CVE is documented with a CVSS v3.1 base score of 7.8 (Impact: High; Privileges Required: Low; Scope: Unchanged; Loc...

CVE-2025-50173 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-20087

CVE-2025-20087 is an Intel advisory issue describing improper default permissions on some Intel® oneAPI DPC++/C++ Compiler installers that could let an authenticated local user escalate privileges. Affected: Intel oneAPI DPC++/C++ Compiler installers (and related tooling) with the vulnerability d...