Qualcomm Permission Android Privilege Escalation

The vulnerability of the Qualcomm Permission component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Qualcomm GNSS API Component Data Compromise

The vulnerability of the Qualcomm GNSS API in the Android operating system is related to errors in pointer arithmetic. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm QTEE API Data Compromise

The vulnerability of the Qualcomm QTEE API in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Qualcomm Access Control Policy Component Data Compromise

The vulnerability of the Qualcomm Access Control Policy component in the Android operating system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm GPT Listener Component Data Compromise

The vulnerability of the Qualcomm GPT listener component in the Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Qualcomm Video Parser Data Compromise

The vulnerability of the Qualcomm Video Parser component in the Android operating system arises due to buffer overflow. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Qualcomm EXIF Analyzer Data Compromise

The vulnerability of the Qualcomm EXIF analyzer for the Android operating system is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Akamai 2018 Spring Release, In A Nutshell

Progressing Towards Our Future in The Cloud, Together As organizations continue to fuel and execute on their digital transformation ambitions, they're increasingly finding significant business agility and cost savings by adopting cloud, multi-cloud, or hybrid architectures. Availability, security...

Master IP Camera01 Unrestricted File Upload

The vulnerability of the Master IP Camera01 microprogramming system lies in the unlimited ability to upload/download the configuration file. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Media Framework Component Data Compromise

The vulnerability of the Media Framework component in the Android operating system is related to resource management errors. Exploiting this vulnerability allows an attacker to compromise data accessibility...

Media Framework Component ih264d_parse_bmb_non_direct_cavlc

The vulnerability of the ih264dparsebmbnondirectcavlc function decoder/ih264dparsebslice.c in the Media Framework of the Android operating system is related to resource management errors. Exploiting this vulnerability could allow a remote attacker to compromise data accessibility...

Media Framework ih264d_get_implicit_weights Function Manipulation

The vulnerability of the ih264dgetimplicitweights function in the decoder/ih264dparsebslice.c file of the Media Framework component of the Android operating system is related to resource management errors. Exploiting this vulnerability could allow a remote attacker to compromise data accessibilit...

Potent Skygofree Malware Packs ‘Never-Before-Seen’ Features

Researchers have identified a powerful new Android malware strain called Skygofree capable of eavesdropping on WhatsApp messages, siphoning private data off phones and allowing adversaries to open reverse shell modules on targeted devices, giving attackers ultimate remote control. Researchers sai...

Google Chrome IndexedDB Memory Use DoS

The vulnerability in the Google Chrome browser’s IndexedDB implementation relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of data through a specially crafted HTML page...

SageCRM Dispatcher Privilege Escalation

The vulnerability of the component dispatcher in SageCRM’s customer relationship management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to increase their privileges and compromise the confidentiality, integrity, and...

fimg2d driver Samsung Exynos 7420 Android Data Compromise

The vulnerability of the fimg2d driver for the Samsung Exynos 7420 Android operating system is related to pointer assignment errors. Exploiting this vulnerability allows a remote attacker to compromise data confidentiality, integrity, and accessibility...

Xxe

Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via progid field...

Google to Block Third-Party Software from Injecting Code into Chrome Browser

To improve performance and reduce crashes caused by third-party software on Windows, Google Chrome, by mid-2018, will no longer allow outside applications to run code within its web browser. If you are unaware, many third-party applications, like accessibility or antivirus software, inject code...

WebKit: use-after-free in WebCore::AXObjectCache::performDeferredCacheUpdate(CVE-2017-13795)

There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. Note that accessibility features need to be enabled in order to trigger this bug. On Safari on Mac this can be accomplished by opening the inspector simply opening the...

WebKit - WebCore::AXObjectCache::performDeferredCacheUpdate Use-After-Free Exploit

Exploit for multiple platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1347 There is a use-after-free security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. Note that accessibility features need to be...