https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:30:29.542784+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04608 bdu:2024-04608 2026-10-03T22:30:29.646592+00:00 bdu:2024-04608 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0489 certfr-2024-avi-0489 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu… 2026-10-03T22:30:29.646632+00:00 certfr-2024-avi-0489 https://cve.radiocsirt.org/vuln/euvd-2026-158347 EUVD-2026-158347 2026-10-03T22:30:29.646653+00:00 EUVD-2026-158347 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29187 fkie_cve-2024-29187 2026-10-03T22:30:29.646667+00:00

WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to drop and load multiple binaries. Standard users can hijack the binary before it's loaded in the application resulting in elevation of privileges. This vulnerability is fixed in 3.14.1 and 4.0.5.

 https://cve.radiocsirt.org/vuln/ghsa-rf39-3f98-xr7r GHSA-rf39-3f98-xr7r — WiX based installers are vulnerable to binary hijack when run as SYSTEM 2026-10-03T22:30:29.646700+00:00

Affected: NuGet: wix, NuGet: WixToolset.Sdk

### Summary Burn uses an unprotected C:\Windows\Temp directory to copy binaries and run them from there. This directory is not entirely protected against low privilege users.

### Details When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an insecure directory C:\Windows\Temp to drop and load multiple binaries. Standard users can hijack the binary before it's loaded in the application resulting in elevation of privileges.

icacls c:\windows\temp

**BUILTIN\Users:(CI)(S,WD,AD,X)** BUILTIN\Administrators:(F) BUILTIN\Administrators:(OI)(CI)(IO)(F) NT AUTHORITY\SYSTEM:(F) NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F) CREATOR OWNER:(OI)(CI)(IO)(F) Built in users(non-administrators) have special permissions to this folder and can create files and write to this directory. While they do not have explicit read permissions, there is a way they can monitor the changes to this directory using ReadDirectoryChangesW API and thus figure out randomized folder names created inside this directory as wel

### PoC

PoC works against the against visual studio enterprise with update 3 [installer ](https://myvs.download.prss.microsoft.com/dbazure/en_visual_studio_enterprise_2015_with_update_3_x86_x64_dvd_8923288.iso?t=8132cd54-4b83-4478-8b73-fd9eb93437bf&P1=1709239640&P2=601&P3=2&P4=iorgKPv%2bG8n2NANTPUVoB92rr8t3W4XM594%2f9BtQQJrYrr8SwxGDxV%2fj%2f2F6Ulto0bXrIaFoZUr4yV37YAsOZVpM29IMtQEO0673AbDVuTe93qDb6wb7xdlpZSse0LZURUwwIFw5cwHQS2ZtvkunXE0osgXtEBT2IzVbPwVH39%…

 https://cve.radiocsirt.org/vuln/gsd-2024-29187 gsd-2024-29187 2026-10-03T22:30:29.646752+00:00 gsd-2024-29187 https://cve.radiocsirt.org/vuln/vde-2024-021 VDE-2024-021 — WAGO: Vulnerability in WAGO Navigator 2026-10-03T22:30:29.646765+00:00

The WAGO Navigator versions 1.0.1 and 1.0 are vulnerable due to the use of the WiX toolset version 3.11.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1338 WID-SEC-W-2024-1338 — Microsoft Visual Studio: Mehrere Schwachstellen 2026-10-03T22:30:29.646784+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft Visual Studio 2017, Microsoft Visual Studio 2019 und Microsoft Visual Studio 2022 ausnutzen, um seine Privilegien zu erhöhen oder beliebigen Programmcode auszuführen.