CVE-2016-6745

An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

Multiple Google products kernel ION subsystem elevation of privilege vulnerability (CNVD-2016-11151)

Google Nexus 5X etc. are smart devices from Google USA. kernel ION is one of the kernel memory management subsystems. An elevation of privilege vulnerability exists in the kernel ION subsystem in several Google products. An attacker can exploit this vulnerability to execute arbitrary code in the...

Google Nexus Qualcomm Camera Driver elevation of privilege vulnerability (CNVD-2016-11135)

Google Nexus is a series of smart devices based on the Android operating system, including cell phones and tablets. The smart devices are manufactured by Google with technology provided and authorized by partner hardware manufacturers, and Qualcomm Camera Driver is one of the high-throughput came...

Google Pixel C NVIDIA GPU Driver elevation of privilege vulnerability (CNVD-2016-11127)

The Google Pixel C is a tablet computer from Google, U.S.A. The NVIDIA GPU driver is an NVIDIA graphics processor driver component used in the... An elevation of privilege vulnerability exists in the Google Pixel C NVIDIA GPU Driver. An attacker can exploit the vulnerability to execute arbitrary...

Google Nexus Synaptics Touchscreen Driver Elevation of Privilege Vulnerability

Google Nexus Synaptics Touchscreen Driver is a driver for the touchscreen of Android products from Google. Elevation of privilege vulnerabilities exist in Google Nexus Synaptics Touchscreen Driver. An attacker can exploit these vulnerabilities to execute arbitrary code with elevated privileges in...

Google Nexus Synaptics Touchscreen Driver elevation of privilege vulnerability (CNVD-2016-11030)

Google Nexus Synaptics Touchscreen Driver is a driver for the touchscreen of Android products from Google. Elevation of privilege vulnerabilities exist in Google Nexus Synaptics Touchscreen Driver. An attacker can exploit these vulnerabilities to execute arbitrary code with elevated privileges in...

CVE-2016-6730

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

Apple OS X IOHDIXController Untrusted Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the IOHDIXController interface. The issue lies...

CVE-2016-3843

Android before 2016-08-05 does not properly restrict code execution in a kernel context, which allows attackers to gain privileges via a crafted application, as demonstrated by the kernel performance subsystem and the Qualcomm performance component, aka Android internal bugs 28086229 and 29119870...

Apple OS X AppleIntelBDWGraphics Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Android kernel elevation of privilege vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the kernel on Android allows a remote attacker to exploit the vulnerability to build special applications that can be tricked into parsing by the user, which can execute arbitrary code in the kernel context...

Android Kernel File System elevation of privilege vulnerability (CNVD-2016-04669)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which the Kernel File System is a kernel file system component. A privilege extraction vulnerability exists in Andrion's Kernel File System. This vulnerability can be exploited ...

Android Qualcomm GPU Driver elevation of privilege vulnerability (CNVD-2016-04614)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm GPU Driver is a graphics processor driver developed by Qualcomm. An elevation of privilege vulnerability exists in the Qualcomm GPU Driver in Android. The vulnerability c...

(Pwn2Own) Apple OS X IntelAccelerator Out-Of-Bounds Indexing Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Apple OS X IOKit CoreCaptureResponder Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within CoreCaptureResponder in IOKit. The issue lies wi...

Apple OS X IOAudioFamily Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the IOAudioFamily kern...

Android Qualcomm RF Component Elevation of Privilege Vulnerability

Android is a Linux-based open-source operating system developed by Google and the Open Handheld Alliance OHA, and Qualcomm RF is a Qualcomm-developed front-end solution that includes a range of chip technologies such as power amplifiers, antenna switches, antenna tuners, and envelope trackers. a...

Apple OS X IOUSBInterfaceUserClient Out-Of-Bounds Indexing Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Microsoft Windows CreateWindowStation Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Apple OS X kernel memory corruption vulnerability (CNVD-2015-06429)

Apple OS X is an operating system developed by Apple Inc. A memory corruption vulnerability exists in the Apple OS X kernel, which can be exploited by a local attacker to execute arbitrary code in the kernel context...