CVE-2019-14601

CVE-2019-14601 affects Intel(R) RWC 3 for Windows, with improper permissions in the installer prior to version 7.010.009.000. An authenticated local user may escalate privileges due to this installer permission issue. The NVD notes CVSSv3.1 base score 7.8 (HIGH) with local access, low attack comp...

CVE-2019-14601

Improper permissions in the installer for IntelR RWC 3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14596

Intel Chipset Device Software INF Utility (Intel CHIPSET INF Utility) is affected by CVE-2019-14596 due to improper access control in the installer prior to version 10.1.18088.8158, potentially enabling a locally authenticated user to cause a denial of service. Intel’s advisory Intel-SA-00306 rec...

CVE-2019-14600

Uncontrolled search path element in the installer for IntelR SNMP Subagent Stand-Alone for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14600

Intel SNMP Subagent Stand‑Alone for Windows had an Uncontrolled search path element in its installer, potentially enabling local privilege escalation for an authenticated user. Details across sources show CVE‑2019‑14600 with a CVSS v3.0 base score of 6.5 (LOCAL, HIGH privilege required, high impa...

HPSBGN03632 rev. 1 - HP SoftPaq Installer Vulnerability

Potential Security Impact Execution of Arbitrary Code, Escalation of Privilege. Source: HP, HP Product Security Response Team PSRT Reported by: Pierre-Alexandre Braeken; Eran Shimony VULNERABILITY SUMMARY A potential security vulnerability has been identified with a version of the HP Softpaq...

Description of the security update for Excel 2016: January 14, 2020

None None...

CVE-2019-6019

Untrusted search path vulnerability in STAMP Workbench installer all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in STAMP Workbench installer all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2019-6019

STAMP Workbench installer is affected by an insecure DLL search path (CWE-427) in the Windows installer, enabling arbitrary code execution with the user’s privileges via a Trojan horse DLL loaded from an unspecified directory. The issue is specific to the installer component, not the STAMP Workbe...

DLL Hijacking Vulnerability in WPS Installer

WPS Office is an office software suite independently developed by Kingsoft Corporation Limited, which can realize the most commonly used text, table, presentation and many other functions of office software. The WPS installer has a DLL hijacking vulnerability, which can be exploited by an attacke...

Input validation

Improper directory permissions in the installer for IntelR Management Engine Consumer Driver for Windows before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45,13.0.10 and 14.0.10; IntelR TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of...

CVE-2019-8801

A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution...

CVE-2019-14603

Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14603

Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14605

Improper permissions in the installer for the IntelR SCS Platform Discovery Utility, all versions, may allow an authenticated user to potentially enable escalation of privilege via local attack...

CVE-2019-14605

The CVE-2019-14605 affects Intel's SCS Platform Discovery Utility (all versions). The root cause is improper permissions in the installer, enabling an authenticated local user to potentially escalate privileges (local, low complexity, privilege requirement). Impact includes potentially elevated p...

CVE-2019-14603

Intel Quadru... wait, keep precise:

CVE-2019-14603

Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of privilege via local access...