193 matches found
Windows App Client RCE Vulnerability (Apr 2025) - Windows
Windows App Client is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Palo Alto GlobalProtect App Windows 6.0.x < 6.0.11 / 6.1.x < 6.1.6 / 6.2.x < 6.2.5 / 6.3.x < 6.3.3 Execution of Unsafe ActiveX Control (CVE-2025-0118)
The version of Palo Alto GlobalProtect App installed on the remote Windows host is 6.0.x prior to 6.0.11, 6.1.x prior to 6.1.6, 6.2.x prior to 6.2.5, or 6.3.x prior to 6.3.3. It is, therefore, affected by a remote command execution vulnerability: - A vulnerability in the Palo Alto Networks...
netty: Denial of Service attack on windows app using Netty
A flaw was found in Netty. An unsafe reading of the environment file could potentially cause a denial of service. When loaded on a Windows application, Netty attempts to load a file that does not exist. If an attacker creates a large file, the Netty application crashes...
CVE-2025-21275 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2025-21275
Technical details about CVE-2025-21275 (Windows App Package Installer Elevation of Privilege) are not provided in the supplied documents. Public specifics on affected product/version/root cause/impact/fix are not available here; monitor for authoritative updates from Microsoft/CVE records.
Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2025-21275: Improper Authorization
Windows App Package Installer Elevation of Privilege Vulnerability...
PT-2024-5980 · Palo Alto Networks · Palo Alto Networks Globalprotect
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect App affected versions not specified Description: A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated...
CVE-2024-38177: Improper Encoding or Escaping of Output
Windows App Installer Spoofing Vulnerability...
PT-2024-6017 · Microsoft · Windows App Installer
Name of the Vulnerable Software and Affected Versions: Windows App Installer affected versions not specified Description: The issue is related to a lack of proper output encoding or escaping mechanism in the Microsoft App Installer, which can be exploited to conduct spoofing attacks using a...
Microsoft Windows App Installer 安全漏洞
Microsoft Windows App Installer is a tool from Microsoft Corporation USA that ships with the Windows 10 and Windows 11 operating systems and allows users to easily install applications by double-clicking on a .msix or .msixbundle file. The tool supports centralized installation of applications fr...
PT-2024-5136 · Zoom · Zoom Workplace App For Windows
Name of the Vulnerable Software and Affected Versions: Zoom Workplace VDI App for Windows affected versions not specified Description: The issue is related to insufficient verification of data authenticity in the installer, which may allow an authenticated user to conduct an escalation of privile...
CVE-2023-50446
An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow any local unprivileged user to escalate privileges to SYSTEM...
Design/Logic Flaw
An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow any local unprivileged user to escalate privileges to SYSTEM...
CVE-2023-50446
An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow any local unprivileged user to escalate privileges to SYSTEM...
CVE-2023-50446
An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow any local unprivileged user to escalate privileges to SYSTEM...
CVE-2023-50446
CVE-2023-50446 affects Mullvad VPN Windows app prior to 2023.6-beta1. The root cause is insufficient permissions on a directory, allowing a local unprivileged user to escalate privileges to SYSTEM. Impact is local privilege escalation with high severity (vascularized by multiple sources). Exploit...
Microsoft 3D Builder app Multiple Remote Code Execution Vulnerabilities (September 2023)
The version of the Microsoft 3D Builder app installed on the remote Windows host is prior to 20.0.4.0. It is, therefore, affected by multiple remote code execution vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute...
Microsoft Windows App Store 安全漏洞
Microsoft Windows App Store is an application store for downloading software from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows App Store. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10...
