CVE-2025-26470

Incorrect default permissions for some IntelR Distribution for Python software installers before version 2025.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-26470

Incorrect default permissions for some IntelR Distribution for Python software installers before version 2025.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-26470

CVE-2025-26470 affects Intel Distribution for Python prior to 2025.1.0. The root cause is incorrect default permissions in the software installers, which may allow an authenticated local user to escalate privileges. Affected product: Intel Distribution for Python (Python distribution from Intel)....

CVE-2025-20087

Incorrect default permissions for some IntelR oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20074

Intel Connectivity Performance Suite installers before version 40.24.11210 are affected by a TOCTOU race condition that may allow an authenticated local user to escalate privileges. Affected product: Intel Connectivity Performance Suite (installer component). Root cause: time-of-check/time-of-use...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20017

Uncontrolled search path for some IntelR oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® Connectivity Performance Suite Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Connectivity Performance Suite software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20074 Description: Time-of-check...

Intel Connectivity Performance Suite August 2025 Security Update

Intel has informed HP of a potential security vulnerability in some Intel® Connectivity Performance Suite software installers, which might allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the...

PT-2025-32746 · Intel · Intel Distribution For Python

Name of the Vulnerable Software and Affected Versions: IntelR Distribution for Python versions prior to 2025.1.0 Description: Incorrect default permissions in some IntelR Distribution for Python software installers may allow an authenticated user to potentially escalate privileges via local acces...

CVE-2025-54368

uv is a Python package and project manager written in Rust. In versions 0.8.5 and earlier, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. An attacker could contrive a ZIP archive that would extract with...

CVE-2025-54368

uv is a Python package and project manager written in Rust. In versions 0.8.5 and earlier, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. An attacker could contrive a ZIP archive that would extract with...

CVE-2025-54368 uv is vulnerable to ZIP payload obfuscation through parsing differentials

uv is a Python package and project manager written in Rust. In versions 0.8.5 and earlier, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. An attacker could contrive a ZIP archive that would extract with...

uv allows ZIP payload obfuscation through parsing differentials

Impact In versions 0.8.5 and earlier of uv, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. This enabled two parser differentials against other Python package installers: 1. An attacker could contrive a ZIP...

CVE-2025-5028 Arbitrary file deletion vulnerability in ESET product installers

Installation file of ESET security products on Windows allow an attacker to misuse to delete an arbitrary file without having the permissions to do so...

CVE-2025-5028 Arbitrary file deletion vulnerability in ESET product installers

Installation file of ESET security products on Windows allow an attacker to misuse to delete an arbitrary file without having the permissions to do so...

CVE-2025-49797

Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary program may be executed with the administrative privilege. As for the details of affected product names, model numbers, and versions, refer to the information provided by the...

Multiple Brother driver installers for Windows vulnerable to privilege escalation

Overview Multiple Brother driver installers for Windows contain the following vulnerability. Files or directories accessible to external parties CWE-552 - CVE-2025-49797 Julian Horoszkiewicz of Eviden reported this vulnerability to the developer. JPCERT/CC coordinated between the reporter and the...

CVE-2025-49797

Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary program may be executed with the administrative privilege. As for the details of affected product names, model numbers, and versions, refer to the information provided by the...