CVE-2025-21373

Windows Installer Elevation of Privilege Vulnerability...

CVE-2025-21373

Windows Installer Elevation of Privilege Vulnerability...

CVE-2025-21373 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-21373 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-21373

Technical details for CVE-2025-21373 are not provided in the supplied documents. Monitor for updates from Microsoft and the KB/MSRC references for affected product, impact and fixes.

Windows Installer Elevation of Privilege Vulnerability

...

PT-2025-6642 · Intel · Intel Dsa

Name of the Vulnerable Software and Affected Versions: IntelR DSA versions prior to 24.2.19.5 Description: The issue is related to incorrect default permissions for some IntelR DSA installers for Windows, which may allow an authenticated user to potentially enable escalation of privilege via loca...

PT-2025-6317 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: An elevation-of-privilege issue in Windows Installer allows attackers to affect the system. The estimated number of potentially affected devices worldwide is not specified. There ...

Microsoft Windows Installer 后置链接漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. A backlink vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate...

CVE-2020-8895

Untrusted Search Path vulnerability in the windows installer of Google Earth Pro versions prior to 7.3.3 allows an attacker to insert malicious local files to execute unauthenticated remote code on the targeted system...

CVE-2024-29187

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to drop and load multiple binaries. Standard users can hijack the binary before it'...

CVE-2024-42052

The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by placing a wevtutil.exe file in the folder...

CVE-2024-42053

The MSI installer for Splashtop Streamer for Windows before 3.6.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by placing a version.dll file in the folder...

CVE-2024-42051

The MSI installer for Splashtop Streamer for Windows before 3.6.2.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM by replacing InstRegExp.reg...

Security update for podman

This update for podman fixes the following issues: CVE-2024-6104: Fixed dependency issue with go-retryablehttp: url might write sensitive information to log file bsc1227052. Update to version 4.9.5: Bump to v4.9.5 Update release notes for v4.9.5 fix "concurrent map writes" in network ls compat...

SUSE-SU-2025:20013-1 Security update for podman

This update for podman fixes the following issues: - CVE-2024-6104: Fixed dependency issue with go-retryablehttp: url might write sensitive information to log file bsc1227052. - Update to version 4.9.5: Bump to v4.9.5 Update release notes for v4.9.5 fix "concurrent map writes" in network ls compa...

CVE-2025-0145

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access...

CVE-2025-0145

Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access...

CVE-2024-9495

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210x VCP Windows installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9495 Uncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210x VCP Windows installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...