Falcon Corruption

O aplicativo Portrait Dell Color Management para monitores Dell apresenta Permissões Inseguras.

O aplicativo Portrait Dell Color Management cria uma pasta temporária com permissões fracas durante a instalação e desinstalação. Um atacante local com privilégios limitados poderia potencialmente explorar isso para obter privilégios mais altos no sistema.

O problema está relacionado a um caminho de pesquisa não controlado no Driver UWP da Série Intel(R) RealSense D400, o que pode permitir que um usuário autenticado potencialmente realize o escalonamento de privilégios via acesso local.

Nome do software vulnerável e versões afetadas: Versões do software Intel(R) FPGA anteriores à v11.19.5.0 Descrição: O problema está relacionado a permissões herdadas inseguras em alguns daemons de licença Flexlm do software Intel(R) FPGA. Isso pode permitir que um usuário autenticado potencialmente consiga escalar privilégios por meio de acesso local. Recomendações: Para versões anteriores à v11.19.5.0, atualize para a versão v11.19.5.0 ou posterior para resolver o problema. Como solução alternativa temporária, considere restringir o acesso local aos daemons de licença Flexlm até que um patch seja aplicado.

O problema está relacionado a permissões padrão incorretas em alguns softwares de driver de vídeo integrado, o que pode permitir que um usuário autenticado potencialmente habilite a escalada de privilégios por meio de acesso local.

O problema está relacionado a permissões padrão incorretas em alguns instaladores do software Intel(R) GPA, o que pode permitir que um usuário autenticado potencialmente consiga escalar privilégios por meio de acesso local.

O problema está relacionado a um elemento de controle de acesso inadequado em alguns softwares de instalação de drivers e ferramentas Intel(R) Ethernet. Isso pode permitir que um usuário autenticado potencialmente consiga escalar privilégios por meio de acesso local.

The issue is related to improper authentication in the Realtek* SD Card Reader Driver installation software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to an uncontrolled search path in the Intel(R) HID Event Filter Driver installation software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to insecure inherited permissions in the software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to an uncontrolled search path in the installation software of the Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool. This may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to improper signature verification of the RadeonTM RX Vega M Graphics driver for Windows. This may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature, potentially leading to arbitrary code execution.

The issue is related to improper signature verification of the RadeonTM RX Vega M Graphics driver for Windows. This could allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature, potentially leading to arbitrary code execution. The vulnerability is associated with errors in cryptographic signature checking.

The issue is related to improper authentication in the Intel(R) NUC Kit NUC11PH USB firmware installation software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to an uncontrolled search path element in some ITE Tech consumer infrared drivers for Intel(R) NUC, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to incorrect default permissions in the Intel(R) SDP Tool software. This may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue is related to an uncontrolled search path element in the BMC video driver, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could permit a malicious user to execute arbitrary code.

The issue is related to incorrect default permissions in the Intel(R) SCS Add-on software installer for Microsoft SCCM, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to gain elevated privileges.

The issue is related to improper authorization, which may allow an authenticated user to potentially enable denial of service via local access.

The issue is related to improper authorization in the Intel(R) EMA software, which may allow an authenticated user to potentially enable denial of service via local access.