FreeBSD IRET Handler Privilege Escalation

The vulnerability of the sysamd64 IRET Handler component in the FreeBSD operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges or cause a kernel failure...

NetBackup Appliance Privilege Escalation Command Execution

The vulnerability of software tools for backup and data restoration in NetBackup Appliance and NetBackup lies in the lack of access control mechanisms root/admin privileges. Exploiting this vulnerability allows a malicious actor to remotely copy any file and execute arbitrary commands with...

MediaTek Android Kernel Privilege Escalation

The vulnerability of MediaTek’s Android operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Comcast Cisco DPC3939 Root Access Code Execution

The vulnerability in the embedded microprogramming software of Comcast’s Cisco DPC3939 router is related to deficiencies in access control for the Linux network processor. Exploiting this vulnerability allows a malicious actor to gain root access to the Linux application processor and execute...

libvorbis Code Execution

The vulnerability of the libvorbis library in the Android operating system’s Media Framework is related to lack of access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Application Policy Infrastructure Controller Privilege Escalation

The vulnerability of the built-in procedure for executing system files during the installation of the Application Policy Infrastructure Controller software relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to increase their...

Mercurial Code Execution

The vulnerability of the Mercurial version control software is related to deficiencies in access control using the command-line parameter “hg serve --stdio”. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a Python debugger, by replacing the...

Broadcom Wi-Fi Driver Privilege Escalation

The vulnerability of Broadcom’s Wi-Fi driver in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a local attacker to increase their privileges...

Android Code Execution

The vulnerability of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Windows OLE Code Execution

The vulnerability of the Windows OLE operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially created file or program...

Resource Power Manager Data Compromise

The vulnerability of the Resource Power Manager RPM component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of sensitive information...

Windows Code Execution

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted image...

Android Code Execution

The vulnerability of the Qualcomm Secure Channel Manager driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the kernel context from a local malicious application. This issue is...

Android Code Execution

The vulnerability of MediaTek’s Android operating system driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the kernel context. This issue is considered “high” because it requires compromising privileged...

Qualcomm Slimbus Driver Code Execution

The vulnerability of the Qualcomm Slimbus driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Qualcomm Android Audio Driver Code Execution

The vulnerability of the Qualcomm Android operating system’s audio driver is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious code within the kernel context. This issue is considered “high” because it requires...

Qualcomm Android Video Driver Code Execution

The vulnerability of the Qualcomm Android operating system’s video driver is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Android kernel file system driver Code Execution

The vulnerability of the kernel file system driver in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the kernel level from a remote location. This issue is considered “critical” due to...

JAXP DoS

The vulnerability of the JAXP component in Java SE, Java SE Embedded, and JRockit software platforms is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a crash or, in rare cases, cause an emergency shutdown through netwo...

SCM Component Privileged Access

The vulnerability of the SCM component of the transportation management optimization system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileged access through HTTP requests...