Sandro Poppi

**Name of the Vulnerable Software and Affected Versions** Symantec Endpoint Protection versions prior to 14.3 RU10 Patch 1 Symantec Endpoint Protection versions prior to 14.3 RU9 Patch 2 Symantec Endpoint Protection versions prior to 14.3 RU8 Patch 3 **Description** The software may be susceptible to an Elevation of Privilege issue, which could allow an attacker to gain elevated access to normally protected resources. **Recommendations** Update Symantec Endpoint Protection to version 14.3 RU10 Patch 1 or later. Update Symantec Endpoint Protection to version 14.3 RU9 Patch 2 or later. Update Symantec Endpoint Protection to version 14.3 RU8 Patch 3 or later.

Name of the Vulnerable Software and Affected Versions: Altiris Core Agent Updater (affected versions not specified) Description: The Altiris Core Agent Updater package (AeXNSC.exe) is susceptible to an elevation of privileges issue due to DLL hijacking. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Intercept X for Windows versions prior to 1.22 **Description** A local privilege escalation issue exists in the Intercept X for Windows installer. If the installer is executed with SYSTEM privileges, a local user may gain system-level access. **Recommendations** Update Intercept X for Windows to version 1.22 or later.

**Name of the Vulnerable Software and Affected Versions** InstallShield versions 2021 R2 through 2023 R2 **Description** A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. **Recommendations** For InstallShield version 2021 R2, update to a version that includes a fix for this issue. For InstallShield version 2022 R2, update to a version that includes a fix for this issue. For InstallShield version 2023 R2, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting the use of InstallScript custom actions in Standalone MSI setups until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Nullsoft Scriptable Install System (NSIS) versions prior to 3.11 **Description** The issue allows local users to escalate privileges to SYSTEM during an installation. This occurs because the temporary plugins directory is created under %WINDIR%temp and unprivileged users can place a crafted executable file by winning a race condition. The EW CREATEDIR does not always set the CreateRestrictedDirectory error flag. **Recommendations** For versions prior to 3.11, update to version 3.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the temporary plugins directory under %WINDIR%temp to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Visual Studio Tools for Applications version 16.0 SQL Server Management Studio (affected versions not specified) Description: The issue is related to an uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio, allowing an authorized attacker to elevate privileges locally. This can potentially compromise the system's integrity. The exploitation of this issue allows an attacker to execute code with elevated privileges. Recommendations: For Visual Studio Tools for Applications version 16.0, consider disabling the vulnerable component until a patch is available. For SQL Server Management Studio, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: System Center (affected versions not specified) Description: The issue concerns an untrusted search path in System Center, allowing an authorized attacker to elevate privileges locally. This means an attacker with existing authorization could exploit this issue to gain higher privileges on the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Visual Studio Code (affected versions not specified) Description: The issue is related to an uncontrolled search path element that allows an authorized attacker to elevate privileges locally. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Visual Studio (affected versions not specified) Description: The issue is related to an elevation of privilege vulnerability in the Visual Studio installer, which is associated with an uncontrolled search path element. Exploitation of this issue may allow an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dell Client Platform Firmware Update Utility (affected versions not specified) **Description** The issue is related to an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Office (affected versions not specified) Description: The issue is related to an elevation of privilege vulnerability in Microsoft Office. It is caused by incorrect handling of symbolic links before accessing a file. Exploitation of this issue may allow an attacker to elevate their privileges. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Visual C++ Redistributable Installer (affected versions not specified) **Description** The issue is related to insufficient access restrictions in the Visual C++ Redistributable Installer, which is part of the Microsoft Visual Studio development environment. Exploitation of this issue may allow an attacker to elevate their privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows 10 (affected versions not specified) **Description** The issue is related to a lack of access control in the Windows Update Stack component, which can be exploited to elevate privileges. An attacker must first obtain the ability to execute low-privileged code on the target system. This can allow an attacker to impact the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer 11 **Description** The issue is related to the mishandling of DLL loading, allowing local users to gain privileges via a crafted application. A remote code execution vulnerability exists when Internet Explorer improperly validates input before loading dynamic link library (DLL) files. An attacker who successfully exploited this vulnerability could take control of an affected system, then install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system could be less impacted than users who operate with administrative user rights. To exploit the vulnerability, an attacker would first have to log on to the target system. **Recommendations** For Microsoft Internet Explorer 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.