The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the ATML component in the Windows operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially crafted application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially crafted application...

Privilege escalation

Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows Task Management Elevation of Privilege Vulnerability," a...

Privilege escalation

The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 does not properly constrain impersonation levels, which allows local users to gain privileges via a...

Privilege escalation

The Adobe Type Manager Library in Microsoft Windows 10 allows local users to gain privileges via a crafted application, aka "Font Driver Elevation of Privilege Vulnerability."...

Privilege escalation

Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows Task Management Elevation of Privilege Vulnerability," a...

Security feature bypass

The kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 allows local users to bypass the ASLR protection mechanism via a crafted application, aka "Kernel ASLR Bypass Vulnerability."...

PT-2015-1994

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is caused by a buffer overflow in the Windows operating system. It can be exploited by a local attacker using a specially crafted application to elevate privileges. Recommendations ...

PT-2015-2018

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access restrictions to certain features in the Windows operating system. It can be exploited by a local attacker using a specially crafted application to...

CVE-2015-2511

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption...

CVE-2015-2508

CVE-2015-2508 is the Font Driver Elevation of Privilege vulnerability in the Adobe Type Manager Library within Windows 10. The issue allows a local attacker to gain higher privileges by abusing a crafted OpenType/font handling via a normal application, as described in MS15-097 and related advisor...

Amazon Linux: Security Advisory (ALAS-2013-200)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2013-252)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Mac OS X operating system, which allows a hacker to read arbitrary notifications

The vulnerability of the Notification Center component of the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to read arbitrary notifications using a specially crafted application...

Vulnerabilities of iOS and Mac OS X operating systems, which allow attackers to gain access to protected information

The vulnerability of iOS and Mac OS X operating systems lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information through a specially crafted application...

The vulnerability of the iOS operating system allows a perpetrator to replace arbitrary extensions.

The vulnerability of the MobileInstallation component in the iOS operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to replace arbitrary extensions using a specially crafted application...

The vulnerability of the Mac OS X operating system allows a hacker to read notifications from the Notification Center.

The vulnerability of the Bluetooth subsystem in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to read notifications from the Notification Center using a specially crafted application...

The vulnerability of the Mac OS X operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the AppleGraphicsControl component in the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a specially crafted...

VulnCheck KEV: CVE-2015-2546

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application...

The vulnerability of the iOS operating system allows a hacker to bypass the sandbox mechanism and read the values of configuration settings.

The vulnerability of the Sandboxprofiles component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the sandbox mechanism and read configuration values using a specially crafted application...