Apple tvOS IOKit Memory Corruption Vulnerability

Apple tvOS is an operating system for Smart TVs from Apple Inc. in the U.S. IOKit is one of the components that reads system information. A security vulnerability exists in the IOKit component of Apple tvOS prior to version 12. An attacker can exploit this vulnerability to execute arbitrary code...

kernel: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space

A an integer overflow vulnerability was discovered in the Linux kernel, from version 3.4 through 4.15, in the drivers/gpu/drm/udl/udlfb.c:udlfbmmap function. An attacker with access to the udldrmfb driver could exploit this to obtain full read and write permissions on kernel physical pages,...

kernel: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space

A an integer overflow vulnerability was discovered in the Linux kernel, from version 3.4 through 4.15, in the drivers/gpu/drm/udl/udlfb.c:udlfbmmap function. An attacker with access to the udldrmfb driver could exploit this to obtain full read and write permissions on kernel physical pages,...

The vulnerability of the Win32k component in Windows operating systems, which allows a hacker to execute arbitrary code

The vulnerability of the Win32k component in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...

Sun Solaris 11.3 AVS Kernel - Local Privilege Escalation

Sun Solaris 11.3 AVS Kernel - Local Privilege Escalation / Exploit Title: Solaris/OpenSolaris AVS kernel code execution Google Dork: if applicable Date: 24/7/2018 Exploit Author: mu-b Vendor Homepage: oracle.com Software Link: Version: Solaris 10, Solaris Sun Opensolaris include include include...

The vulnerability of the pktmnglr_ipfilter_input function in the kernel of operating systems such as Mac OS X, iOS, tvOS, and watchOS allows a malicious actor to execute arbitrary code with kernel privileges or cause a service failure.

The vulnerability of the pktmnglripfilterinput function in the kernel of operating systems such as Mac OS X, iOS, tvOS, and watchOS is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code with kernel privileges or cause a service failur...

The vulnerability of the IOHIDFamily component of the Mac OS X operating system allows a perpetrator to execute arbitrary code with kernel privileges or cause a service failure.

The vulnerability of the IOHIDFamily component in the Mac OS X operating system is caused by a buffer overflow in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with kernel privileges or cause a service failure using a specially created application...

Apple macOS High Sierra Hypervisor Memory Corruption Vulnerability

Apple macOS High Sierra is a suite of specialized operating systems developed by Apple for Mac computers.A Hypervisor also known as a Virtual Machine Monitor VMM is an intermediate software layer that runs between a physical server and an operating system, allowing multiple operating systems and...

Apple macOS High Sierra memory corruption vulnerability (CNVD-2018-12164)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.IOHIDFamily is one of the kernel extensions Abstract Interface for Human Interface Devices components of IOHIDFamily. A security vulnerability exists in the IOHIDFamily component in Apple macOS High...

The vulnerability of the Qualcomm Crypto Engine (QCE) encryption driver of the Android operating system allows a hacker to execute arbitrary code within the kernel context.

The vulnerability of the Qualcomm Crypto Engine QCE encryption driver in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code within the kernel context...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2018-10987)

Microsoft Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical mode GUI. Microsoft Windows suffers from an elevation of privilege vulnerability. The vulnerability arises because the Win32k component fails to properly handle objects in memor...

UBUNTU-CVE-2018-8781

The udlfbmmap function in drivers/gpu/drm/udl/udlfb.c at the Linux kernel version 3.4 and up to and including 4.15 has an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code...

CVE-2016-9093

A version of the SymEvent Driver that shipped with Symantec Endpoint Protection 12.1 RU6 MP6 and earlier fails to properly sanitize logged-in user input. SEP 14.0 and later are not impacted by this issue. A non-admin user would need to be able to save an executable file to disk and then be able t...

Memory Corruption Vulnerability in Apple macOS Sierra AppleGraphicsControl

Apple macOS Sierra is a specialized operating system developed by Apple for Mac computers.AppleGraphicsControl is one of the integrated graphics drivers. A security vulnerability exists in the AppleGraphicsControl component of Apple macOS Sierra versions prior to 10.12.6. An attacker can exploit...

PT-2018-18627 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 3.4 through 4.15 Description: The issue allows local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in code execution in kernel space. This is due t...

Microsoft Desktop Bridge Elevation of Privilege Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Desktop Bridge is one of the desktop application converters. A boost vulnerability exists in Microsoft Desktop Bridge, which stems from the program's failure to properly manage the...

Microsoft Windows and Macrovision SafeDisc secdrv.sys driver memory misreference vulnerability

Microsoft Windows Vista, etc. are a series of operating systems released by Microsoft Corporation, U.S.A. Macrovision SafeDisc is a suite of copy protection programs for Windows applications and games distributed on CD-ROMs from the U.S.A. Macrovision. secdrv. sys is one of the drivers used by...

Sony Playstation 4 (PS4) 4.07 < 4.55 - 'bpf' Local Kernel Code Execution (PoC)

function stage4 function mallocsz var backing = new Uint8Array1000+sz; window.nogc.pushbacking; var ptr = p.read8p.leakvalbacking.add320x10; ptr.backing = backing; return ptr; function malloc32sz var backing = new Uint8Array0x1000+sz4; window.nogc.pushbacking; var ptr =...

macOS - Kernel Code Execution due to Lack of Bounds Checking in AppleIntelCapriController::GetLinkCo

Exploit for macOS platform in category dos / poc...

Apple macOS - Kernel Code Execution due to Lack of Bounds Checking in AppleIntelCapriController::GetLinkConfig

Apple macOS - Kernel Code Execution due to Lack of Bounds Checking in AppleIntelCapriController::GetLinkConfig / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1375 AppleIntelCapriController::GetLinkConfig trusts a user-supplied value in the structure input which it uses to ind...