Xavier Danest

vcpkg, a C/C++ package manager, exhibited a configuration issue in its Windows builds of OpenSSL. Specifically, the `openssldir` setting was configured to a path on the build machine. This configuration could potentially allow for attacks on customer machines. The issue was addressed with version 3.6.1#3.

A local privilege escalation issue exists in Soda PDF Desktop due to an uncontrolled search path element. This allows for potential exploitation, leading to privilege escalation.

A local privilege escalation issue exists in PDFsam Enhanced. A physically-present attacker can exploit this by mounting a malicious drive onto the target system and leveraging a flaw in the OpenSSL configuration, specifically how the product loads an OpenSSL configuration file from an unsecured location. Successful exploitation allows an attacker to escalate privileges and execute arbitrary code with SYSTEM-level privileges.

This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within the configuration of OpenSSL, where the product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this issue to escalate privileges and execute arbitrary code in the context of SYSTEM.

The issue is related to an uncontrolled search path vulnerability in the Data Loss Prevention module, which could allow an attacker to inject malicious code. This could lead to arbitrary code execution on affected installations.

This issue allows local attackers to gain elevated privileges on systems running Famatech Advanced IP Scanner. An attacker must first have the ability to execute code with limited privileges on the target system. The root cause is the application's insecure handling of Qt plugins, specifically loading them from an unsecured location. An attacker can exploit this by pre-staging a malicious plugin in the search path, which the application then loads with administrator privileges when executed. The vulnerability is related to unsafe Qt plugin search paths and is identified as CWE-427.

A misconfiguration in the `lmadmin.exe` executable allows the OpenSSL configuration file to be loaded from a non-existent directory. This issue, categorized as an Uncontrolled Search Path Element, occurs because the application references the OpenSSL configuration file using a hardcoded path without enforcing access restrictions. A locally authenticated user with low privileges can create the missing directory and place a specially crafted `openssl.conf` file within it. This can lead to the loading of a malicious DLL (Dynamic-Link Library) into the `lmadmin.exe` process, resulting in arbitrary code execution with elevated privileges, potentially reaching the `NT AUTHORITYSYSTEM` level. This flaw has been reported as actively exploited in the wild.

A low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and Linux hosts.

This issue allows local attackers to escalate privileges on affected installations of 3CX. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within the configuration of OpenSSL, where the product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this issue to escalate privileges and execute arbitrary code in the context of SYSTEM.

This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The specific flaw exists within the DNACore service, which loads a file from an unsecured location, allowing an attacker to leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM.

This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within the configuration of OpenSSL, where the product loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this issue to escalate privileges and execute arbitrary code in the context of SYSTEM.

The issue is related to incorrect permission assignment, which could allow a local attacker to escalate privileges due to an overly permissive folder in the product installer. This could potentially enable a remote attacker to elevate their privileges.

This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within the Dispatcher service, which loads an OpenSSL configuration file from an unsecured location. An attacker can leverage this issue to escalate privileges and execute arbitrary code in the context of SYSTEM.

This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue. The specific flaw exists within the Desktop Control Agent service, which loads Qt plugins from an unsecured location. An attacker can leverage this issue to escalate privileges and execute arbitrary code in the context of SYSTEM.

A local privilege escalation issue exists in the Palo Alto Networks Cortex XDR agent software on Windows, allowing an authenticated local user with file creation privilege in the Windows root directory to execute a program with elevated privileges.

The issue is related to a vulnerability in the configuration of OpenSSL in NVIDIA Omniverse Nucleus and Cache. An attacker with physical access to the system can cause arbitrary code execution, which can impact confidentiality, integrity, and availability.

The issue is related to an Uncontrolled Search Path Element Privilege Escalation. No further details are provided about the estimated number of potentially affected devices or real-world incidents.

A local privilege escalation issue exists in the Palo Alto Networks Cortex XDR agent, allowing an authenticated local user to execute programs with elevated privileges.

An uncontrolled search path element issue could allow a local attacker to escalate privileges on affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue.

An uncontrolled search path element vulnerability could allow a local attacker to escalate privileges on affected installations. The attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this issue.