Xavier Danest

ظهرت مشكلة في التكوين في vcpkg، وهو مدير حزم C/C++، في إصدارات OpenSSL المخصصة لنظام Windows. وعلى وجه التحديد، تم تكوين الإعداد `openssldir` على مسار موجود على جهاز البناء. وقد يؤدي هذا التكوين إلى السماح بشن هجمات على أجهزة العملاء. تم معالجة المشكلة في الإصدار 3.6.1#3.

توجد ثغرة أمنية تتعلق بتصعيد الصلاحيات محليًّا في برنامج Soda PDF Desktop بسبب عنصر مسار بحث غير خاضع للرقابة. وهذا يتيح إمكانية الاستغلال، مما يؤدي إلى تصعيد الصلاحيات.

توجد ثغرة أمنية تتعلق بتصعيد الامتيازات المحلية في برنامج PDFsam Enhanced. يمكن للمهاجم الموجود فعليًا استغلال هذه الثغرة عن طريق تركيب وحدة خبيثة على النظام المستهدف والاستفادة من خلل في تكوين OpenSSL، وتحديدًا في الطريقة التي يقوم بها المنتج بتحميل ملف تكوين OpenSSL من موقع غير آمن. يتيح الاستغلال الناجح للمهاجم رفع مستوى الامتيازات وتنفيذ تعليمات برمجية عشوائية بامتيازات على مستوى SYSTEM.

تسمح هذه الثغرة للمهاجمين المحليين بتصعيد الصلاحيات في الأنظمة المتأثرة. يجب على المهاجم أولاً الحصول على القدرة على تنفيذ تعليمات برمجية ذات صلاحيات منخفضة على النظام المستهدف لاستغلال هذه الثغرة. توجد الثغرة المحددة في تكوين OpenSSL، حيث يقوم المنتج بتحميل ملف تكوين OpenSSL من موقع غير آمن. يمكن للمهاجم استغلال هذه المشكلة لرفع مستوى الامتيازات وتنفيذ تعليمات برمجية عشوائية في سياق SYSTEM.

تتعلق المشكلة بثغرة أمنية في مسار البحث غير الخاضع للرقابة في وحدة «منع فقدان البيانات» (Data Loss Prevention)، مما قد يسمح للمهاجم بحقن تعليمات برمجية ضارة. وقد يؤدي ذلك إلى تنفيذ تعليمات برمجية عشوائية على التثبيتات المتأثرة.

This issue allows local attackers to gain elevated privileges on systems running Famatech Advanced IP Scanner. An attacker must first have the ability to execute code with limited privileges on the target system. The root cause is the application's insecure handling of Qt plugins, specifically loading them from an unsecured location. An attacker can exploit this by pre-staging a malicious plugin in the search path, which the application then loads with administrator privileges when executed. The vulnerability is related to unsafe Qt plugin search paths and is identified as CWE-427.

A misconfiguration in the `lmadmin.exe` executable allows the OpenSSL configuration file to be loaded from a non-existent directory. This issue, categorized as an Uncontrolled Search Path Element, occurs because the application references the OpenSSL configuration file using a hardcoded path without enforcing access restrictions. A locally authenticated user with low privileges can create the missing directory and place a specially crafted `openssl.conf` file within it. This can lead to the loading of a malicious DLL (Dynamic-Link Library) into the `lmadmin.exe` process, resulting in arbitrary code execution with elevated privileges, potentially reaching the `NT AUTHORITYSYSTEM` level. This flaw has been reported as actively exploited in the wild.

A low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts.

This issue allows local attackers to escalate privileges on affected installations of 3CX. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within the configuration of OpenSSL, where the product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this issue to escalate privileges and execute arbitrary code in the context of SYSTEM.

This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The specific flaw exists within the DNACore service, which loads a file from an unsecured location, allowing an attacker to leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within the configuration of OpenSSL, where the product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this issue to escalate privileges and execute arbitrary code in the context of SYSTEM.

The issue is related to incorrect permission assignment, which could allow a local attacker to escalate privileges due to an overly permissive folder in the product installer. This could potentially enable a remote attacker to elevate their privileges.

This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within the Dispatcher service, which loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this issue to escalate privileges and execute arbitrary code in the context of SYSTEM.

This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within the Desktop Control Agent service, which loads Qt plugins from an unsecured location. An attacker can leverage this issue to escalate privileges and execute arbitrary code in the context of SYSTEM.

A local privilege escalation issue exists in the Palo Alto Networks Cortex XDR agent software on Windows, allowing an authenticated local user with file creation privilege in the Windows root directory to execute a program with elevated privileges.

The issue is related to a vulnerability in the configuration of OpenSSL in NVIDIA Omniverse Nucleus and Cache. An attacker with physical access to the system can cause arbitrary code execution, which can impact confidentiality, integrity, and availability.

The issue is related to an Uncontrolled Search Path Element Privilege Escalation. No further details are provided about the estimated number of potentially affected devices or real-world incidents.

A local privilege escalation issue exists in the Palo Alto Networks Cortex XDR agent, allowing an authenticated local user to execute programs with elevated privileges.

An uncontrolled search path element issue could allow a local attacker to escalate privileges on affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue.

An uncontrolled search path element vulnerability could allow a local attacker to escalate privileges on affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue.