Falcon Corruption

يحتوي تطبيق Portrait Dell Color Management المخصص لشاشات Dell على أذونات غير آمنة.

يقوم تطبيق Portrait Dell Color Management بإنشاء مجلد مؤقت ذي أذونات ضعيفة أثناء التثبيت وإلغاء التثبيت. قد يتمكن مهاجم محلي ذو امتيازات محدودة من استغلال هذه الثغرة للحصول على امتيازات أعلى في النظام.

تتعلق المشكلة بمسار بحث غير خاضع للرقابة في برنامج تشغيل UWP لسلسلة Intel(R) RealSense D400، مما قد يسمح لمستخدم معتمد بتصعيد الامتيازات عبر الوصول المحلي.

Name of the Vulnerable Software and Affected Versions: Intel(R) FPGA software versions prior to v11.19.5.0 Description: The issue is related to insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software. This may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions prior to v11.19.5.0, update to version v11.19.5.0 or later to resolve the issue. As a temporary workaround, consider restricting local access to the Flexlm License Daemons until a patch is applied.

The issue is related to incorrect default permissions in some onboard video driver software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to incorrect default permissions in some Intel(R) GPA software installers, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to an improper access control element in some Intel(R) Ethernet tools and driver install software. This may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to improper authentication in the Realtek* SD Card Reader Driver installation software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to an uncontrolled search path in the Intel(R) HID Event Filter Driver installation software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to insecure inherited permissions in the software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to an uncontrolled search path in the installation software of the Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool. This may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to improper signature verification of the RadeonTM RX Vega M Graphics driver for Windows. This may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature, potentially leading to arbitrary code execution.

The issue is related to improper signature verification of the RadeonTM RX Vega M Graphics driver for Windows. This could allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature, potentially leading to arbitrary code execution. The vulnerability is associated with errors in cryptographic signature checking.

The issue is related to improper authentication in the Intel(R) NUC Kit NUC11PH USB firmware installation software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to an uncontrolled search path element in some ITE Tech consumer infrared drivers for Intel(R) NUC, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to incorrect default permissions in the Intel(R) SDP Tool software. This may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to an uncontrolled search path element in the BMC video driver, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could permit a malicious user to execute arbitrary code.

The issue is related to incorrect default permissions in the Intel(R) SCS Add-on software installer for Microsoft SCCM, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to gain elevated privileges.

The issue is related to improper authorization, which may allow an authenticated user to potentially enable denial of service via local access.

The issue is related to improper authorization in the Intel(R) EMA software, which may allow an authenticated user to potentially enable denial of service via local access.