1335 matches found
The vulnerability of the Windows Installer installer service on the Windows operating system allows a hacker to increase their privileges.
The vulnerability of the Windows Installer installer service stems from deficiencies in the handling of group access policies. Exploiting this vulnerability can allow an attacker to enhance their privileges by executing a specially crafted executable file...
Ongoing Exploitation of Windows Installer CVE-2021-41379
CVE | Vendor Advisory | AttackerKB | IVM Content | Patching Urgency | Last Update ---|---|---|---|---|--- CVE-2021-41379 | Microsoft Advisory | AttackerKB | Scheduled when patched | ASAP when released | December 3, 2021 3:00 PM ET See the Updates section at the end of this post for new informatio...
VulnCheck KEV: CVE-2021-41379
Microsoft Windows Installer contains an unspecified vulnerability that allows for privilege escalation...
Attackers exploiting Windows Installer vulnerability despite patching
By Waqas According to Cisco Talos, abusing the flaw would allow an attacker with limited access to get higher privileges and become an administrator. This is a post from HackRead.com Read the original post: Attackers exploiting Windows Installer vulnerability despite patching...
Warning — Hackers Exploiting New Windows Installer Zero-Day Exploit in the Wild
Attackers are actively making efforts to exploit a new variant of a recently disclosed privilege escalation vulnerability to potentially execute arbitrary code on fully-patched systems, once again demonstrating how adversaries move quickly to weaponize a publicly available exploit. Cisco Talos...
Windows Installer vulnerability becomes actively exploited zero-day
Sometimes the ways in which malicious code gets in the hands of cybercriminals is frustrating for those in the industry, and incomprehensible to those on the outside. A quick summary of the events in the history of this exploit: A researcher found a flaw in Windows Installer that would allow an...
Attackers Actively Target Windows Installer Zero-Day
Attackers are actively exploiting a Windows Installer zero-day vulnerability that was discovered when a patch Microsoft issued for another security hole inadequately fixed the original and unrelated problem. Over the weekend, security researcher Abdelhamid Naceri discovered a Windows Installer...
Attackers exploiting zero-day vulnerability in Windows Installer — Here’s what you need to know and Talos’ coverage
Cisco Talos is releasing new SNORTⓇ rules to protect against the exploitation of a zero-day elevation of privilege vulnerability in Microsoft Windows Installer. This vulnerability allows an attacker with a limited user account to elevate their privileges to become an administrator. This... This i...
PT-2021-5019 · Microsoft · Windows Installer +1
Name of the Vulnerable Software and Affected Versions: Windows Installer versions prior to the fixed version Description: The issue is caused by insufficient handling of group policy access. Exploitation of this issue may allow an attacker to elevate their privileges by running a specially crafte...
The vulnerability of the Windows Installer component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Windows Installer component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the Windows Installer component on Microsoft Windows operating systems, which allows attackers to perform spoofing attacks
The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
CVE-2021-33058
Improper access control in the installer IntelRAdministrative Tools for IntelR Network Adaptersfor Windowsbefore version 1.4.0.21 may allow an unauthenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0064
Insecure inherited permissions in the IntelR PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2021-0065
Incorrect default permissions in the IntelR PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...
The vulnerability of the Windows Installer component on Microsoft Windows operating systems, which allows attackers to perform spoofing attacks
The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...
Microsoft Windows Installer Elevation of Privilege Vulnerability
Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. An elevation of privilege vulnerability exists in Microsoft Windows Installer, which can be exploited by an attacker to elevate...
Design/Logic Flaw
The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files with .msi, .ps1, and .bat extensions. This could lead to a malicious actor installing malicious software on a customer’s computer...
Zoom Client 数据伪造问题漏洞
ZOOM Client is a video conferencing client application from ZOOM USA that supports multiple platforms. A data forgery issue vulnerability exists in the windows installer of Zoom Client for Meetings versions prior to 5.5.4, which originates from not properly verifying the signatures of files with...
