1335 matches found
Popular YouTube Channel Caught Distributing Malicious Tor Browser Installer
A popular Chinese-language YouTube channel has emerged as a means to distribute a trojanized version of a Windows installer for the Tor Browser. Kaspersky dubbed the campaign OnionPoison, with all of the victims located in China. The scale of the attack remains unclear, but the Russian...
CVE-2022-41975
RealVNC VNC Server before 6.11.0 and VNC Viewer before 6.22.826 on Windows allow local privilege escalation via MSI installer Repair mode...
GoCD 安全漏洞
GoCD is a continuous delivery server. A security vulnerability exists in GoCD versions prior to 22.2.0 that stems from a Windows installation performed by a server or proxy installer that does not sufficiently restrict permissions when installed outside of the default location, which could allow ...
CVE-2022-2313
A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is being executed...
PT-2022-4816 · Unknown · Ma Smart Installer
Name of the Vulnerable Software and Affected Versions: MA Smart Installer for Windows versions prior to 5.7.7 Description: The issue is related to a DLL hijacking vulnerability, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DL...
CVE-2022-36414
There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before 4.4.3. Affected versions allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation...
PT-2022-23357 · Scooter · Beyond Compare
Name of the Vulnerable Software and Affected Versions: Scooter Beyond Compare versions 4.2.0 through 4.4.2 Description: The issue is an elevation of privilege breakout vulnerability in the Windows EXE installer. It allows a logged-in user to run applications with elevated privileges via the...
Scooter Software Beyond Compare 安全漏洞
Scooter Software Beyond Compare is content comparison tool software from Scooter Software. A security vulnerability exists in Scooter Software Beyond Compare versions 4.2.0 through 4.4.2 prior to 4.4.3, which stems from an elevated privilege vulnerability in the Windows EXE installer that allows...
Samsung USB Driver Windows Installer for Mobile Phones Input Validation Error Vulnerability
Samsung USB Driver Windows Installer for Mobile Phones is a driver used by Samsung mobile devices to connect to a PC.Samsung USB Driver Windows Installer for Mobile Phones 1.7. An input validation error vulnerability exists in versions prior to 56.0. The vulnerability stems from faulty validation...
CVE-2022-33711
Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction...
SAMSUNG USB Driver 安全漏洞
Samsung USB Driver Windows Installer for Mobile Phones is a driver used by Samsung mobile devices to connect to a PC.Samsung USB Driver Windows Installer for Mobile Phones 1.7. An input validation error vulnerability exists in versions prior to 56.0. The vulnerability stems from faulty validation...
CVE-2022-33711
Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction...
CVE-2022-33711
The CVE-2022-33711 issue affects Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0, due to improper validation of an integrity check. This enables local attackers to delete arbitrary directories via a directory junction. Affected component: Samsung USB Driver Window...
CVE-2022-30147
Windows Installer Elevation of Privilege Vulnerability...
CVE-2022-30147
Windows Installer Elevation of Privilege Vulnerability...
Privilege escalation
Windows Installer Elevation of Privilege Vulnerability...
CVE-2022-30147
Technical details about CVE-2022-30147 are not provided in the supplied documents; no affected products, versions, root cause, or remediation are specified here. Monitor for official vulnerability advisories for specifics.
CVE-2022-30147 Windows Installer Elevation of Privilege Vulnerability
...
Microsoft Windows Installer 安全漏洞
Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. The following products and editions are affected: Windows Server 2012...