Huawei Mate10 Reuse After Release Vulnerability

Huawei Mate10 is a smartphone product from Chinese company Huawei Huawei. A post-release reuse vulnerability exists in the driver in versions prior to Huawei Mate10 ALP-AL00B 9.0.0.167 C00E85R2P20T8, which can be exploited by an attacker to cause a denial of service by tricking a user into...

CVE-2018-5410

Dokan, versions between 1.0.0.5000 and 1.2.0.1000, are vulnerable to a stack-based buffer overflow in the dokan1.sys driver. An attacker can create a device handle to the system driver and send arbitrary input that will trigger the vulnerability. This vulnerability was introduced in the 1.0.0.500...

CVE-2018-19320

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system...

Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.89 and fixes at least the following security issues: Cross-hyperthread Spectre v2 mitigation is now provided by the Single Thread Indirect Branch Predictors STIBP support. Note that STIBP also requires the functionality be supported by the Intel...

About the security content of iOS 11.2.5 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2018-10712

CVE-2018-10712 affects ASRock RGBLED and related ASRock utilities (ASrDrv101.sys/AsrDrv102.sys) that expose IO port read/write access via low-level drivers. Details from multiple sources show vulnerable components include ASRock RGBLED < v1.0.35.1, A-Tuning < v3.0.210, F-Stream < v3.0.21...

MGASA-2018-0417 Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.78 and fixes at least the following security issues: An issue was discovered in the fdlockedioctl function in drivers/block/floppy.c in the Linux kernel through 4.15.7. The floppy driver will copy a kernel pointer to user memory in response to the...

CVE-2018-16713

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...

CVE-2018-16711

CVE-2018-16711 affects IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys. Version 1.2.0.5 (and possibly earlier) allows a user to send an IOCTL (0x9C402088) containing user-controlled data. The driver’s subroutine will execute a wrmsr instruction using the us...

CVE-2018-16713

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402084 with a buffer containing user defined content. The driver's subroutine will execute a rdmsr instruction with the user's buffer for...

CVE-2018-16711

IObit Advanced SystemCare, which includes Monitorwin10x64.sys or Monitorwin7x64.sys, 1.2.0.5 and possibly earlier versions allows a user to send an IOCTL 0x9C402088 with a buffer containing user defined content. The driver's subroutine will execute a wrmsr instruction with the user's buffer for...

CVE-2018-8462

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel DXGKRNL driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

Denial of service vulnerability in the mp110005.sys driver of Micropoint Smart Defense Software Personal Free Edition (CNVD-2018-20116)

Micropoint Intelligent Defense Software Personal Free Edition is a set of third-generation anti-virus software of Micropoint Baihui Beijing Information Security Technology Co., Ltd. and adopts AI Intelligent Defense Technology to independently analyze and judge viruses. A denial of service...

Denial of service vulnerability in the mp110005.sys driver of Micropoint Smart Defense Software Personal Free Edition (CNVD-2018-20120)

Micropoint Intelligent Defense Software Personal Free Edition is a set of third-generation anti-virus software of Micropoint Baihui Beijing Information Security Technology Co., Ltd. and adopts AI Intelligent Defense Technology to independently analyze and judge viruses. A denial of service...

Denial of Service Vulnerability in Micropoint Intelligent Defense Software Personal Free Edition mp110005.sys Driver

Micropoint Intelligent Defense Software Personal Free Edition is a set of third-generation anti-virus software of Micropoint Baihui Beijing Information Security Technology Co., Ltd. and adopts AI Intelligent Defense Technology to independently analyze and judge viruses. A denial of service...

Denial of service vulnerability in the mp110005.sys driver of Micropoint Intelligent Defense Software Personal Free Edition (CNVD-2018-20118)

Micropoint Intelligent Defense Software Personal Free Edition is a set of third-generation anti-virus software of Micropoint Baihui Beijing Information Security Technology Co., Ltd. and adopts AI Intelligent Defense Technology to independently analyze and judge viruses. A denial of service...

PostgreSQL JDBC Man-in-the-Middle Security Bypass Vulnerability

PostgreSQL JDBC is a database driver. A security vulnerability exists in PostgreSQL JDBC versions prior to 42.2.5 that stems from the Postgres JDBC driver not verifying host names by default. An attacker could exploit this vulnerability by presenting credentials to the wrong host to spoof a trust...

The vulnerability of the DirectX Graphics Kernel driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow attackers to gain elevated privileges through a specially created application...

Intel Smart Sound Technology Driver Module Elevation of Privilege Vulnerability (CNVD-2018-15603)

Intel Smart Sound Technology is an integrated audio DSP Digital Signal Processor from Intel USA, which is mainly used to process audio, support voice interaction and so on. An elevation of privilege vulnerability exists in the driver module in versions prior to Intel Smart Sound Technology...

Intel Smart Sound Technology Driver Module Elevation of Privilege Vulnerability (CNVD-2018-15605)

Intel Smart Sound Technology is an integrated audio DSP Digital Signal Processor from Intel USA, which is mainly used to process audio, support voice interaction and so on. An elevation of privilege vulnerability exists in the driver module in versions prior to Intel Smart Sound Technology...