Vulnerability of Google Chrome and Microsoft Edge browser installers, allowing attackers to increase their privileges

The vulnerability of Google Chrome and Microsoft Edge browsers is related to insufficient data validation. Exploiting this vulnerability can allow attackers to enhance their privileges...

Fake TeamViewer Installer Used to Deliver njRAT Malware

By Habiba Rashid A fake and malicious version of TeamViewer is being pushed as legitimate, which in reality infects devices with njRAT Malware aka Bladabindi. This is a post from HackRead.com Read the original post: Fake TeamViewer Installer Used to Deliver njRAT Malware...

Supply-Chain Attack Targeting Pakistani Government Delivers Shadowpad

We recently found that an MSI installer built by the National Information Technology Board NITB, a Pakistani government entity, delivered a Shadowpad sample, suggesting a possible supply-chain attack...

Microsoft Windows Installer Service Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Windows...

CVE-2023-36536

Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-34119

Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-34119

Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-32050

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-32050

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-32053

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-32053

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-32053

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-32050

Windows Installer Elevation of Privilege Vulnerability...

Design/Logic Flaw

Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

Privilege escalation

Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36536

Zoom Rooms for Windows contains a vulnerability prior to version 5.15.0 where an untrusted search path in the installer could enable privilege escalation for an authenticated local user. The issue is documented across CVE-2023-36536 sources (NVD/NVD entry, CVE listing, and related summaries). Aff...

CVE-2023-36536

Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-34119

Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...