CVE-2017-15340

Huawei smartphones with software of TAG-AL00C92B168 have an information disclosure vulnerability. An attacker tricks the user to install a crafted application, this application simulate click action to back up data in a non-encrypted way using an Android assist function. Successful exploit could...

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:0274-1)

This update for the Linux Kernel 3.12.69-606429 fixes several issues. The following security issues were fixed : - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:0267-1)

This update for the Linux Kernel 3.12.74-606466 fixes one issue. The following security issue was fixed : - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a crafted...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:0250-1)

This update for the Linux Kernel 3.12.61-5289 fixes one issue. The following security issues were fixed : - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a crafted...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:0251-1)

This update for the Linux Kernel 3.12.61-52101 fixes one issue. The following security issues were fixed : - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a crafted...

SUSE-SU-2018:0238-1 Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP1)

This update for the Linux Kernel 3.12.74-606445 fixes several issues. The following security issues were fixed: - CVE-2017-15868: The bnepaddconnection function in net/bluetooth/bnep/core.c in did not ensure that an l2cap socket is available, which allowed local users to gain privileges via a...

Huawei Mate 9 Pro Integer Overflow Vulnerability

Huawei Mate 9 Pro is a smartphone from the Chinese company Huawei Huawei. The Huawei Mate 9 Pro suffers from an integer overflow vulnerability, which results in an integer overflow due to the camera driver failing to properly validate an external input parameter and subsequent processing resultin...

Security Advisory - Integer Overflow Vulnerability on Smartphones

There is an integer overflow vulnerability on smartphones. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks the user to install a crafted application, successful exploit...

Buffer overflow

Buffer overflow in the Qualcomm radio driver in Android before 2017-01-05 on Android One devices allows local users to gain privileges via a crafted application, aka Android internal bug 32639452 and Qualcomm internal bug CR1079713...

CVE-2016-5345

Buffer overflow in the Qualcomm radio driver in Android before 2017-01-05 on Android One devices allows local users to gain privileges via a crafted application, aka Android internal bug 32639452 and Qualcomm internal bug CR1079713...

The vulnerability of the Mac OS X operating system’s kernel allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Mac OS X operating system’s kernel arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption through a...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-02174)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. The Google Android Qualcomm component has an elevation of privilege vulnerability that can be...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-02182)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. The Google Android Qualcomm component has an elevation of privilege vulnerability that can be...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2018-00518)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. An elevation of privilege vulnerability exists in the kernel in Microsoft Windows, which arises from a program's failure to properly handle objects in memory. T...

Microsoft Windows ATMFD.dll Local Elevation of Privilege Vulnerability

Microsoft Windows 7 SP1 and so on are a series of operating systems released by the United States Microsoft Microsoft.Adobe Type Manager Font Driver Atmfd.dll is a font management driver of the United States Audobee Adobe. A local elevation of privilege vulnerability exists in Adobe Type Manager...

Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2018-00521)

Microsoft Windows 7 SP1 and others are products of Microsoft Corporation in the United States. Microsoft Windows 7 SP1 is an operating system for personal computers; Windows Server 2008 SP2 is a server operating system. kernel is a kernel used in it. An information disclosure vulnerability exists...

Microsoft Windows Subsystem for Linux Elevation of Privilege Vulnerability (CNVD-2018-00519)

Microsoft Windows 10 and Windows Server Version 1709 are both products of Microsoft Corporation.Microsoft Windows 10 is a cross-platform operating system for PCs and laptops, tablets, and cell phones.Windows Server Version 1709 is a server operating system. Microsoft Windows 10 is a cross-platfor...

Information disclosure

The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICKREPLYBACKGROUND service action, which might allow remote attackers with knowledge of the local email address to obtain...

CVE-2015-7889

The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICKREPLYBACKGROUND service action, which might allow remote attackers with knowledge of the local email address to obtain...