Nvidia GPU Display Driver for Linux拒绝服务漏洞

Nvidia GPU Display Driver for Linux is a driver for interactive support of graphics modules on Linux systems from Nvidia, Inc. A denial-of-service vulnerability exists in the Nvidia GPU Display Driver for Linux kernel driver package, which can be exploited by attackers to The vulnerability can be...

CVE-2022-21814: Improper Handling of Insufficient Permissions or Privileges

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel driver package, where improper handling of insufficient permissions or privileges may allow an unprivileged local user limited write access to protected memory, which can lead to denial of service...

CVE-2021-33088

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.4449 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0109

The CVE-2021-0109 issue affects Intel’s SOC Driver Package for STK1A32SC (versions before 604). The root cause is insecure inherited permissions in the driver package, which may allow an authenticated local user to escalate privileges. Intel’s advisory (Intel SA-00471) confirms the vulnerability,...

CVE-2021-0109: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions for the IntelR SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel SOC driver package for STK1A32SC security vulnerability

Intel SOC driver package for STK1A32SC is a computer stick from Intel Corporation USA. A security vulnerability exists in the Intel SOC driver package for STK1A32SC that arises from a lack of effective privilege-granting and access-control measures on a networked system or product...

Nvidia Squashes High-Severity Jetson DoS Flaw

Nvidia has patched three vulnerabilities affecting its Jetson lineup, which is a series of embedded computing boards designed for machine-learning applications, in things like autonomous robots, drones and more. A successful exploit could potentially cripple any such gadgets leveraging the affect...

Security Bulletin: NVIDIA Jetson TX1 and Jetson Nano L4T - July 2019

NVIDIA has released software security updates for NVIDIA® Jetson™ TX1 and Jetson™ Nano in the NVIDIA® Tegra® Linux Driver Package L4T. The update addresses issues that may lead to code execution, denial of service, or escalation of privileges. To protect your system, download available updates fr...

Windows 10 Update Bricks PCs, Microsoft Offers Workarounds

Microsoft has acknowledged that a Windows 10 bug is causing some users’ systems to freeze after using their System Restore feature. The issue arose after users complained that when they updated Windows 10 and attempted to restart their system, they were met with a “Stop error” that blocked them...

Security Bulletin: Vulnerabilities in GSKit affect IBM Data Server Client and Driver packages(CVE-2016-0201, CVE-2015-7420 and CVE-2015-7421)

Summary Vulnerabilities have been addressed in the GSKit component of IBM Data Server Client and Driver packages Vulnerability Details CVEID: CVE-2016-0201 DESCRIPTION: IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a MD5 collision. An attacker could exploit th...

Microsoft Windows 10: Load and unload device drivers

This policy setting determines which users can dynamically load and unload device drivers. This user right is not required if a signed driver for the new hardware already exists in the driver.cab file on the device. Device drivers run as highly privileged code. Windows supports the Plug and Play...

CVE-2017-9758

CVE-2017-9758 affects Savitech USB audio driver packages for Windows. Some driver installers silently install a root CA certificate (SaviAudio) into the Windows Trusted Root Certification Authorities store, creating a trust-anchor that can be abused for man-in-the-middle attacks. Impact reported ...

Design/Logic Flaw

Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package MBDP with build ID 4657 allows local users to launch processes with elevated privileges...

CVE-2017-9247

Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package MBDP with build ID 4657 allows local users to launch processes with elevated privileges...

CVE-2017-9247

CVE-2017-9247 concerns the Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with build ID

CVE-2017-9247: Unquoted Search Path or Element

Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package MBDP with build ID 4657 allows local users to launch processes with elevated privileges...

[SECURITY] Fedora 25 Update: globus-xio-pipe-driver-3.10-1.fc25

The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for thei...

[SECURITY] Fedora 24 Update: globus-xio-pipe-driver-3.10-1.fc24

The Globus Toolkit is an open source software toolkit used for building Grid systems and applications. It is being developed by the Globus Alliance and many others all over the world. A growing number of projects and companies are using the Globus Toolkit to unlock the potential of grids for thei...

Conexant Systems MicTray64 Information Disclosure Vulnerability

Conexant Systems MicTray64 is an application that Conexant Systems USA installs with the Conexant Audio Driver package and registers as a Microsoft Scheduled Task to run after each user logs on. The program monitors all keystrokes taken by the user to capture and respond to functions such as...