OneDrive for Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...

The vulnerability of the Windows Cryptography Next Generation (CNG) service for Windows operating systems, which allows a hacker to compromise and disclose protected information

The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Microsoft Windows power lifting vulnerability (CNVD-2020-33734)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevated privilege vulnerability exists in the way the tapisrv.dll file handles memory objects in Microsoft Windows. An attacker can exploit this vulnerability to execute code with...

CVE-2019-2215

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network...

Huawei Hima-AL00B Code Execution Vulnerability

The Huawei Hima-AL00B is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in the Huawei Hima-AL00B HMA-AL00C00B175 previous version, which stems from a problem in the logic of signature verification. The vulnerability can be exploited to execute arbitrary code ...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is caused by errors during the initialization of objects in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

The vulnerability of the DirectX component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Apple macOS memory corruption vulnerability (CNVD-2018-22951)

macOS is Apple's proprietary operating system for the Mac line of products. A memory corruption vulnerability exists in the Kernel component in Apple macOS Sierra 10.12.6, macOS High Sierra 10.13.6, and macOS Mojave 10.14. An attacker can exploit the vulnerability via an application to execute...

Apple macOS High Sierra AppleGraphicsControl Memory Read Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.AppleGraphicsControl is one of the integrated graphics drivers. A memory read vulnerability exists in the AppleGraphicsControl component of Apple macOS High Sierra version 10.13.6, which can be exploite...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information

The vulnerability of the Windows operating system’s kernel is related to the lack of verification of the cryptographic signature. Exploiting this vulnerability can allow a perpetrator to disclose protected information using a specially crafted application...

The vulnerability of the NTFS file system implementation in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system implementation in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2018-10730)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation USA.Windows Hyper-V is one of the virtualization products that supports the creation of virtual machines in Windows. A remote code execution vulnerability exists in Microsoft Windows Hyper-V that...

SUSE-SU-2018:0237-1 Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP1)

This update for the Linux Kernel 3.12.74-606454 fixes several issues. The following security issues were fixed: - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a...

Microsoft Windows graphics information disclosure vulnerability (CNVD-2017-33309)

Microsoft Windows Server 2008 SP2 and others are a series of operating systems released by Microsoft Corporation in the United States. graphics is one of the graphics driver components. An information disclosure vulnerability exists in graphics in Microsoft Windows, which arises from the program'...

Cisco Wide Area Application Services Denial of Service Vulnerability

Cisco Wide Area Application Services WAAS is the United States Cisco Cisco company's set of WAN link acceleration software. The software is mainly used for small bandwidth and high latency link environment. A remote denial of service vulnerability exists in Cisco Wide Area Application Services,...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Broadcom Wi-Fi driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the operating system’s kernel, using a special application...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Wi-Fi driver for Qualcomm’s Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the operating system kernel using a special application...

CVE-2015-9004

kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted application, related to the perfpmuregister and perfeventopen functions...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of kernel-level drivers in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially crafted application...

The vulnerability of the Windows operating system, which allows a hacker to bypass the certificate verification process

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to bypass the certificate verification process through a specially created application...