DEBIAN-CVE-2017-18549

An issue was discovered in drivers/scsi/aacraid/commctrl.c in the Linux kernel before 4.13. There is potential exposure of kernel stack memory because aacsendrawsrb does not initialize the reply structure...

CVE-2019-15084

Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result, a local attacker can escalate to SYSTEM...

Code injection

In the Linux kernel before 4.14, an out of boundary access happened in drivers/nvme/target/fc.c...

Design/Logic Flaw

Access to freed memory can happen while reading from diag driver due to use after free issue in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064...

The vulnerability of the handler in the SnCloneVault.sys driver of the Secret Net Studio information protection system, which allows a hacker to cause a service failure.

The vulnerability of the handler in the SnCloneVault.sys driver of the Secret Net Studio information protection system is related to deficiencies in the control of input data in the driver. Exploiting this vulnerability can allow an attacker to cause a service failure...

Intel Turbo Boost Max Technology 3.0 driver Permission License and Access Control Issues Vulnerability

Intel Turbo Boost Max Technology 3.0 driver is an Intel Turbo Boost Max Technology 3.0 driver from Intel Corporation. A security vulnerability exists in Intel Turbo Boost Max Technology 3.0 driver 1.0.0.1035 and earlier versions. A local attacker can exploit this vulnerability to elevate privileg...

STOPzilla AntiMalware Denial of Service Vulnerability (CNVD-2019-19487)

STOPzilla AntiMalware is a set of antivirus software from the American company STOPzilla that is mainly used for malware detection and killing. A denial of service vulnerability exists in the szkg64.sys driver file in STOPzilla AntiMalware version 6.5.2.59. The vulnerability originates from a...

STOPzilla AntiMalware Denial of Service Vulnerability

STOPzilla AntiMalware is a set of antivirus software from the American company STOPzilla that is mainly used for malware detection and killing. A denial of service vulnerability exists in the szkg64.sys driver file in STOPzilla AntiMalware version 6.5.2.59. The vulnerability originates from a...

The vulnerability of the Windows Common Log File System driver in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System CLFS driver in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the LUAFV driver of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s driver, luafv.sys, is related to a bug in driver call handling. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

The vulnerability of the LUAFV driver for Windows operating systems allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Windows operating system’s driver, luafv.sys, is related to errors in driver call handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain elevated privileges...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege-lifting vulnerability exists in Microsoft Windows that stems from Windows'...

From alert to driver vulnerability: Microsoft Defender ATP investigation unearths privilege escalation flaw

With Microsoft continuously improving kernel mitigations and raising the bar for exploiting native kernel components, third-party kernel drivers are becoming a more appealing target for attackers and an important area of research for security analysts. A vulnerability in a signed third-party driv...

NVIDIA Windows GPU Display Driver Code Issue Vulnerability

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver dedicated to the Windows platform. A code issue vulnerability exists in NVIDIA Windows GPU Display Driver. An attacker could exploit this vulnerability to cause code execution, denial of service, and elevation of...

CVE-2019-5669

NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of...

VulnCheck KEV: CVE-2018-8406

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel DXGKRNL driver improperly handles objects in memory...

CVE-2019-8372

The LHA.sys driver before 1.1.1811.2101 in LG Device Manager exposes functionality that allows low-privileged users to read and write arbitrary physical memory via specially crafted IOCTL requests and elevate system privileges. This occurs because the device object has an associated symbolic link...

Input validation

NVIDIA Tegra Gralloc module contains a vulnerability in driver in which it does not validate input parameter of the registerbuffer API, which may lead to arbitrary code execution, denial of service, or escalation of privileges. Android ID: A-62540032 Severity Rating: High Version: N/A...

Security Advisory - Double Free Vulnerability on Smartphones

There is a double free vulnerability on certain driver of smartphones. An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same resource at the same time. Successful exploit could cause a denial of service condition. Vulnerability ID:...

Huawei Honor V10, 10 and Play Competitive Conditions Vulnerability

The Huawei Honor V10, 10 and Play are smartphone products from the Chinese company Huawei Huawei. The drivers in the Huawei Honor V10, 10 and Play contain a competitive condition vulnerability that can be exploited by an attacker to execute malicious code by tricking a user into installing a...