The vulnerability of the Multi-Touch component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Multi-Touch component in the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system is related to errors during the loading of a library. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

Vulnerability of Windows operating system kernel drivers, which allows attackers to increase their privileges

The vulnerability of Windows operating system kernel drivers is related to incorrect handling of objects in memory by the kernel-level driver. Exploiting this vulnerability can allow a local attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system is related to insufficient checking of descriptors. Exploiting this vulnerability can allow a local attacker to enhance their privileges through a specially created application...

The vulnerability of the mm-video-v4l2 venc component in the Mediaserver application of the Android operating system allows a hacker to increase their privileges.

The vulnerability of the mm-video-v4l2 venc component in the Mediaserver application of the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges through a specially...

AVEVideoEncoder Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2017-07729)

Apple iOS, tvOS and watchOS are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system; watchOS is a smart watch operating system. avevideoEncoder is one of the video encoders. A memory corruption vulnerability exists in the...

Multiple Apple Products CoreAudio Component Information Disclosure Vulnerability

Apple iOS is a product of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is a smart TV operating system. coreAudio is one of the core audio components. An information disclosure vulnerability exists in the CoreAudio component of several Apple products. An attacker can exploi...

CVE-2017-9211

The cryptoskcipherinittfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-size check, which allows local users to cause a denial of service NULL pointer dereference via a crafted application...

DEBIAN-CVE-2017-9211

The cryptoskcipherinittfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-size check, which allows local users to cause a denial of service NULL pointer dereference via a crafted application...

Null pointer dereference

The cryptoskcipherinittfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-size check, which allows local users to cause a denial of service NULL pointer dereference via a crafted application...

Memory corruption

The GPU driver in Huawei P7 phones with software P7-L00 before P7-L00C17B851, P7-L05 before P7-L05C00B851, and P7-L09 before P7-L09C92B851 allows local users to read or write to arbitrary kernel memory locations and consequently cause a denial of service system crash or gain privileges via a...

Apple macOS Sierra WindowServer memory corruption vulnerability (CNVD-2017-08135)

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. A memory corruption vulnerability exists in Apple macOS Sierra WindowServer, which can be exploited by a remote attacker to submit a special application and trick the user into parsing it to execute arbitrary cod...

Apple macOS Sierra WindowServer Memory Corruption Vulnerability

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. A memory corruption vulnerability exists in Apple macOS Sierra WindowServer, which can be exploited by a remote attacker to submit a special application and trick the user into parsing it to execute arbitrary cod...

CVE-2017-6997

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "AVEVideoEncoder" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servic...

Apple iOS Notifications Denial of Service Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices, and Notifications is one of the notification components. A denial of service vulnerability exists in the Notifications component of Apple iOS prior to version 10.3.2. An attacker can exploit this vulnerability to cause a deni...