4639 matches found
CVE-2017-1084
CVE-2017-1084 affects FreeBSD prior to 11.2-RELEASE. Multiple stack guard-page implementation issues weaken protections, enabling a stack overflow by a poorly written process. Public PoCs/Exploits exist (FGPE/FGPU) and vendor-advised path is to upgrade to 11.2-RELEASE or later to mitigate.
Microsoft Windows Device Guard Security Bypass Vulnerability (CNVD-2018-24938)
Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote security bypass vulnerability exists in Microsoft Windows. An attacker could use this vulnerability to bypass certain security restrictions and perform unauthorized operations. This could...
PT-2018-5297
Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.2-RELEASE Description The issue is related to the implementation of the stack guard-page in FreeBSD, which reduces the protections afforded by the guard-page. This could allow a poorly written process to cause a...
CVE-2017-1083: Improper Restriction of Operations within the Bounds of a Memory Buffer
In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibility a poorly written process could be cause a stack overflow...
CVE-2017-1084: Improper Restriction of Operations within the Bounds of a Memory Buffer
In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections afforded by the guard-page. This results in the possibility a poorly written process could be cause a stack overflow...
Microsoft Windows Multiple Vulnerabilities (KB4457131)
This host is missing a critical security update according to Microsoft KB4457131 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
September 11, 2018—KB4457138 (OS Build 15063.1324)
None None...
Device Guard Security Feature Bypass Vulnerability
A security feature bypass exists when Device Guard incorrectly validates an untrusted file. An attacker who successfully exploited this vulnerability could make an unsigned file appear to be signed. Because Device Guard relies on the signature to determine the file is non-malicious, Device Guard...
PT-2018-1654
Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description A security feature bypass issue exists due to incorrect validation of untrusted files by Device Guard, allowing attackers to bypass security restrictions using a specially crafted...
Microsoft Windows Device Guard CVE-2018-8449 Remote Security Bypass Vulnerability
Description Microsoft Windows is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit System...
Microsoft Device Guard Security Feature Bypass (CVE-2018-8449)
A security bypass vulnerability exists in Microsoft Device Guard. Successful exploitation of this vulnerability would allow remote attackers to bypass security tests and protocols on the affected system...
The vulnerability of the components of Device Guard in Windows operating systems allows a hacker to bypass code integrity checks.
The vulnerability of the Device Guard component of Windows operating systems is related to improperly implemented security checks. Exploiting this vulnerability allows an attacker to bypass code integrity checks by injecting malicious code into the trusted PowerShell process...
The vulnerability of the components of Device Guard in Windows operating systems allows a hacker to bypass code integrity checks.
The vulnerability of the Device Guard component of Windows operating systems is related to improperly implemented security checks. Exploiting this vulnerability allows an attacker to bypass code integrity checks by injecting malicious code into the trusted PowerShell process...
August 30, 2018—KB4343889 (OS Build 15063.1292)
None None...
August 30, 2018—KB4343884 (OS Build 14393.2457)
None None...
DEBIAN-CVE-2018-0501
The mirror:// method implementation in Advanced Package Tool APT 1.6.x before 1.6.4 and 1.7.x before 1.7.0alpha3 mishandles gpg signature verification for the InRelease file of a fallback mirror, aka mirrorfail...
Intel CPU Foreshadow Vulnerability
L1 terminal failure SGX vulnerability mainly exists in the models of CPUs that support Intel SGX Software Protection Extension technology, the vulnerability is named: Foreshadow Foreshadow, the use of speculation to perform a side-channel attack, with local user access rights, an attacker can...
The vulnerability of the Software Guard eXtensions processor technology allows unauthorized access to data stored in a secure zone.
The vulnerability of the Software Guard eXtensions SGX processor implementation relates to the possibility of speculative execution of instructions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to data protected by SGX, by executing attacks through peripheral...
Intel CPU Foreshadow-NG (foreshadow next-generation version) Vulnerability
The L1 Terminal Malfunction OS/SMM vulnerability is different for Intel CPUs with SGX Software Protection Extensions technology, and may also affect CPUs from other vendors. With the speculative execution of a side-channel attack, an attacker with local user access could achieve an unauthorized...
CVE-2018-8200
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...