51 matches found
CVE-2016-1753
Multiple integer overflows in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allow attackers to execute arbitrary code in a privileged context via a crafted app...
CVE-2016-1750
Use-after-free vulnerability in the kernel in Apple iOS before 9.3, OS X before 10.11.4, tvOS before 9.2, and watchOS before 2.2 allows attackers to execute arbitrary code in a privileged context via a crafted app...
Design/Logic Flaw
The kernel in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows attackers to cause a denial of service via a crafted app, a different vulnerability than CVE-2015-7040, CVE-2015-7041, and CVE-2015-7043...
Android Remote Elevation of Privilege Vulnerability (CNVD-2015-07366)
Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A remote elevation of privilege vulnerability exists in Android versions prior to 5.1.1 LMY48X and 6.0 prior to 2015. Allows an attacker to gain privileges through a...
Android Denial of Service Vulnerability (CNVD-2015-07341)
Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A denial-of-service vulnerability exists in version 5.x prior to Android 5.1.1 LMY48X. It allows an attacker to launch a denial-of-service attack and gain privileges via ...
Vulnerabilities in the Android operating system that allow a hacker to execute arbitrary code and read arbitrary keys from the Keystore.
The multiple vulnerabilities of the Android operating system’s Keystore component are related to buffer overflows in dynamic memory, caused by integer overflows. Exploitation of these vulnerabilities allows a remote attacker to execute arbitrary code and read arbitrary Keystore keys using a...
CVE-2015-6606
The Secure Element Evaluation Kit aka SEEK or SmartCard API plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786...
CVE-2015-3766
The kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly restrict the machportspaceinfo interface, which allows attackers to obtain sensitive memory-layout information via a crafted app...
Design/Logic Flaw
The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon...
CVE-2013-5156
The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackers to bypass intended restrictions on phone calls via a crafted app that sends direct requests to the daemon...
PT-2009-2790 · Microsoft · .Net Framework
Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 1.0 SP3 through 2.0 SP1 Description: The issue allows remote attackers to obtain unintended access to stack memory and execute arbitrary code via crafted applications, including XAML browser applications,...