CVE-2024-23974

Incorrect default permissions in some IntelR ISH software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-27461

CVE-2024-27461 affects Intel® MAS (GUI) with incorrect default permissions in the software installer, potentially allowing an authenticated local user to cause a denial of service. Intel’s advisory and Red Hat/NVD entries confirm the issue is tied to Intel® MAS (GUI) prior to version 2.5.0, with ...

CVE-2024-38177

Windows App Installer Spoofing Vulnerability...

CVE-2024-38177

Windows App Installer Spoofing Vulnerability...

Intel HID Event Filter Software Installer Advisory - Lenovo Support US

No description provided...

Intel ISH Software Installer Advisory - Lenovo Support US

No description provided...

CVE-2024-38177

CVE-2024-38177: Windows App Installer Spoofing vulnerability. Multiple sources (PT-2024-6017; OpenVAS entry) indicate the flaw stems from lack of proper output encoding/escaping in Windows App Installer, enabling spoofing via specially crafted packages. The available connected documents do not sp...

CVE-2024-38177 Windows App Installer Spoofing Vulnerability

...

CVE-2024-38177 Windows App Installer Spoofing Vulnerability

...

July 9, 2024—KB5040499 (Monthly Rollup)

None None...

July 9, 2024—KB5040437 (OS Build 20348.2582)

None None...

July 9, 2024—KB5040497 (Monthly Rollup)

None None...

July 9, 2024—KB5040430 (OS Build 17763.6054) - EXPIRED

None None...

July 9, 2024—KB5040427 (OS Builds 19044.4651 and 19045.4651) - EXPIRED

None None...

July 9, 2024—KB5040434 (OS Build 14393.7159) - EXPIRED

None None...

Windows App Installer Spoofing Vulnerability

...

July 9, 2024—KB5040490 (Security-only update)

None None...

Microsoft Windows App Installer 安全漏洞

Microsoft Windows App Installer is a tool from Microsoft Corporation USA that ships with the Windows 10 and Windows 11 operating systems and allows users to easily install applications by double-clicking on a .msix or .msixbundle file. The tool supports centralized installation of applications fr...

KLA71483 SUI vulnerability in Microsoft Apps

A spoofing vulnerability vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2024-38177 CVE list CVE-2024-38177 critical Solution Install necessary updates from the KB section, that are listed in your Windows...

PT-2024-6017 · Microsoft · Windows App Installer

Name of the Vulnerable Software and Affected Versions: Windows App Installer affected versions not specified Description: The issue is related to a lack of proper output encoding or escaping mechanism in the Microsoft App Installer, which can be exploited to conduct spoofing attacks using a...