Sim0Nsecurity

Insufficient verification of data authenticity in the Remote Control feature may allow an authenticated user to achieve an escalation of privilege through local access.

An issue exists where external control of a file name or path may allow an authenticated user with local access to achieve escalation of privilege.

An untrusted search path in the installer allows an authenticated user with local access to achieve escalation of privilege.

An improper input validation issue exists in Zoom Rooms for Windows in Kiosk Mode. A user with existing authentication can potentially escalate privileges through local access.

An improper privilege management issue exists in certain Zoom Clients for Windows. An authenticated user with local access may be able to escalate their privileges.

An improper check of the minimum version in the update functionality of certain Zoom Clients for Windows could allow an authenticated user to escalate privileges through local access.

Name of the Vulnerable Software and Affected Versions: Zoom Workplace for Windows on ARM versions prior to 6.5.0 Description: Missing authorization in the installer may allow an authenticated user to conduct an escalation of privilege via local access. Recommendations: Update Zoom Workplace for Windows on ARM to version 6.5.0 or later.

Name of the Vulnerable Software and Affected Versions: Zoom Clients for Windows (affected versions not specified) Description: A race condition exists in the installer for certain Zoom Clients for Windows. This may allow a local, unauthenticated user to compromise application integrity. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Visual Studio (affected versions not specified) Description: The issue concerns improper link resolution before file access, also known as 'link following', which allows an unauthorized attacker to elevate privileges over a network. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft PC Manager (affected versions not specified) Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to improper link resolution before file access, also known as 'link following', in Microsoft Edge (Chromium-based). This allows an authorized attacker to elevate privileges locally. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Name of the Vulnerable Software and Affected Versions: Microsoft PC Manager (affected versions not specified) Description: The issue is related to improper link resolution before file access, also known as 'link following', in Microsoft PC Manager. This allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Office (affected versions not specified) Description: The issue is related to improper access control, allowing an authorized attacker to elevate privileges locally. This can affect the system, potentially leading to further exploitation. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Windows Installer (affected versions not specified) Description: The issue is related to improper link resolution before file access, also known as 'link following', in Windows Installer. This allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

The issue is related to improper access control in Intel(R) GPA software, which may allow an authenticated user to potentially enable denial of service via local access.

The issue concerns an uncontrolled search path in some Intel(R) Chipset Software Installation Utility versions. This may allow an authenticated user to potentially enable escalation of privilege via local access.

A time-of-check time-of-use race condition may allow an authenticated user to potentially enable escalation of privilege via local access. This issue affects some Intel(R) Battery Life Diagnostic Tool software.

The issue is related to incorrect default permissions for some Intel(R) DSA installers for Windows, which may allow an authenticated user to potentially enable escalation of privilege via local access.

The issue concerns an uncontrolled search path in the Intel(R) XTU software for Windows, which may allow an authenticated user to potentially enable escalation of privilege via local access.