147 matches found
CVE-2026-20880
Incorrect default permissions for some IntelR Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This resul...
CVE-2026-20756
Incorrect default permissions for some IntelR Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This resul...
CVE-2026-20880
Several Intel(R) Graphics Driver software installers within Ring 3 are affected by incorrect default permissions . An unprivileged software adversary with authenticated user access can perform a high complexity attack to achieve escalation of privilege . This local vulnerability requires active u...
CVE-2026-20880
Incorrect default permissions for some IntelR Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This resul...
CVE-2026-20756
This vulnerability involves incorrect default permissions for certain Intel(R) Graphics Driver software installers within Ring 3. An unprivileged software adversary with authenticated user access may achieve an escalation of privilege through a high-complexity attack. The flaw is exploitable via ...
EUVD-2026-121287
Incorrect default permissions for some IntelR Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This resul...
CVE-2026-26191
Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's software installer pipeline could allow a crafted software package to execute arbitrary commands as root macOS/Linux or SYSTEM Windows on managed endpoints when an uninstall is triggered. When a...
CVE-2026-26191: Improper Neutralization of Special Elements used in an OS Command
Fleet is open source device management software. Prior to version 4.81.0, a vulnerability in Fleet's software installer pipeline could allow a crafted software package to execute arbitrary commands as root macOS/Linux or SYSTEM Windows on managed endpoints when an uninstall is triggered. When a...
Intel® Connectivity Performance Suite Software Installer Advisory
Summary: A potential security vulnerability in some Intel® Connectivity Performance Suite software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20772 Description: Uncontrolled...
CVE-2026-4135
During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to perform an arbitrary file write with elevated privileges...
CVE-2026-34387: Improper Neutralization of Special Elements used in an OS Command
Fleet is open source device management software. Prior to 4.81.1, a command injection vulnerability in Fleet's software installer pipeline allows an attacker to achieve arbitrary code execution as root macOS/Linux or SYSTEM Windows on managed hosts when an uninstall is triggered for a crafted...
CVE-2026-26050
CVE-2026-26050 affects the installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール prior to version 1.3.7 . The issue is in the DLL search path which may cause insecure loading of Dynamic Link Libraries, enabling arbitrary code execution with administrative privileges . CVSS metrics from JPCERT quantify t...
CVE-2025-48503
A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...
CVE-2025-48503
A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...
CVE-2025-48503
A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...
PT-2026-7592
A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...
CVE-2025-48503: Uncontrolled Search Path Element
A DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...
AMD Graphics Driver Vulnerabilities – February 2026
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description | CVSS Score ---|---|--- CVE-2024-36324| Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution.| 8.8 High...
CVE-2021-33064
Uncontrolled search path in the software installer for IntelR System Studio for all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-33963
Incorrect default permissions in the software installer for IntelR UniteR Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access...