CVE-2016-5025

CVE-2016-5025 affects NVIDIA Quadro, NVS, and GeForce Windows drivers via the NVAPI support layer. The root cause is improper sanitization of parameters, leading to a denial-of-service (blue screen crash) in the NVIDIA Windows graphics drivers. Connected documents corroborate multiple vendor advi...

November 2016 Security Monthly Quality Rollup for Windows Server 2012

November 2016 Security Monthly Quality Rollup for Windows Server 2012 Summary This security updates includes improvements and fixes from update 3192406. To learn more about the non-security improvements and fixes in this update, see the October 18, 2016 — KB3192406 Preview of Monthly Rollup entry...

November 2016 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2

November 2016 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2 Summary This security updates includes improvements and fixes from update 3192404. To learn more about the non-security improvements and fixes in this update, see the October 18, 2016 — KB3192404 Preview of...

November 2016 Security Only Quality Update for Windows Server 2012

November 2016 Security Only Quality Update for Windows Server 2012 Summary This security update resolves the following vulnerabilities in Windows Server 2012: MS16-142 Cumulative security update for Internet Explorer MS16-140 Security update for boot manager MS16-138 Security update to Microsoft...

November 2016 Security Only Quality Update for Windows 8.1, and Windows Server 2012 R2

November 2016 Security Only Quality Update for Windows 8.1, and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS16-142 Cumulative security update for Internet Explorer: November 8, 2016 MS16-140 Security updat...

Cumulative update for Windows 10: November 8, 2016

None None...

MS16-135: Description of the security update for Windows kernel-mode drivers: November 8, 2016

None None...

November 8, 2016 — KB3198585 (OS Build 10240.17190)

None None...

Mac OS X 10.x < 10.12.1 Multiple Vulnerabilities

Binary data 9758.prm...

November 8, 2016 — KB3198586 (OS Build 10586.679)

None None...

MS16-135: Security update for Windows kernel-mode drivers: November 8, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application that could exploit the vulnerabilities and take control of the system.SummaryThis security update resolves vulnerabilities in Microsoft...

Ubuntu 14.04 LTS / 16.04 LTS : NVIDIA graphics drivers vulnerabilities (USN-3122-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3122-1 advisory. It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue to possibly...

USN-3122-1 nvidia-graphics-drivers-304, nvidia-graphics-drivers-340, nvidia-graphics-drivers-367 vulnerability

It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue to possibly gain root privileges...

USN-3122-1: NVIDIA graphics drivers vulnerabilities

It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue to possibly gain root privileges...

Apple macOS 10.12 - 'task_t' Local Privilege Escalation

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=837 TL;DR you cannot hold or use a task struct pointer and expect the euid of that task to stay the same. Many many places in the kernel do this and there are a great many very exploitable bugs as a result. taskt is just a typedef...

CherryTree 0.36.9 Memory Corruption

!/usr/bin/python CherryTree 0.36.9 - Memory Corruption PoC by n30m1nd Date: 2016-10-27 PoC Author: n30m1nd Vendor Homepage: http://www.giuspen.com/cherrytree/ Software Link: http://www.giuspen.com/software/cherrytree0.36.9setup.exe Version: Affects all versions of CherryTree prior to 0.37.6 Teste...

CherryTree 0.36.9 - Memory Corruption (PoC)

!/usr/bin/python CherryTree 0.36.9 - Memory Corruption PoC by n30m1nd Date: 2016-10-27 PoC Author: n30m1nd Vendor Homepage: http://www.giuspen.com/cherrytree/ Software Link: http://www.giuspen.com/software/cherrytree0.36.9setup.exe Version: Affects all versions of CherryTree prior to 0.37.6 Teste...

Apple macOS Sierra NVIDIA Graphics Drivers Memory Corruption Vulnerability

Apple macOS Sierra is a specialized operating system developed for Mac computers. A memory corruption vulnerability exists in NVIDIA Graphics Drivers in Apple macOS Sierra, which allows remote attackers to exploit the vulnerability to build malicious applications that can execute arbitrary code...

CherryTree 0.36.9 - Memory Corruption (PoC)

Exploit for windows platform in category dos / poc !/usr/bin/python CherryTree 0.36.9 - Memory Corruption PoC by n30m1nd Date: 2016-10-27 PoC Author: n30m1nd Vendor Homepage: http://www.giuspen.com/cherrytree/ Software Link: http://www.giuspen.com/software/cherrytree0.36.9setup.exe Version: Affec...

Heap Buffer Overflow Vulnerability in Drivers for Multiple Huawei Smartphones

Huawei Smart Phones are a smartphone from the Chinese company Huawei. A heap buffer overflow vulnerability exists in the driver of multiple Huawei Smart Phones and can be exploited by an attacker to execute arbitrary code on an affected device...