CVE-2017-0519

An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android...

CVE-2016-6241

Integer overflow in the amapalloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the NVIDIA GPU operating system for Android is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary local malicious code within the kernel context. This issue is considered “critical” due to the possibility of...

Google Nexus/Pixel Products Qualcomm Wi-Fi Driver Elevation of Privilege Vulnerability (CNVD-2017-01583)

Google Nexus/Pixel are both smartphones from the American company Google Google. An elevation of privilege vulnerability exists in Google Nexus/Pixel products. An attacker can exploit this vulnerability to execute arbitrary code in the context of the kernel using elevated privileges...

Google Pixel/Pixel XL HTC touchscreen driver elevation of privilege vulnerability (CNVD-2017-01364)

Google Pixel & Pixel XL are new Android smartphones launched by Google on October 4, 2016, succeeding the previous Nexus series. An elevation of privilege vulnerability exists in the HTC touchscreen driver, which can be exploited by an attacker to cause a native app to execute arbitrary code in t...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the initial loader of the Qualcomm Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered...

Google Android TSP sysfs - cmd_store Multiple Overflows

Google Android TSP sysfs - cmdstore Multiple Overflows Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=967 The TSP touchscreen controller driver exposes several sysfs entries through which the driver may be configured. One such entry, "cmd", allows the user to write commands to ...

CVE-2016-8430

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-6783

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android I...

CVE-2016-6777

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

Google Nexus NVIDIA GPU driver elevation of privilege vulnerability (CNVD-2017-00473)

Android on Nexus 9 is a Linux-based open source operating system for the Nexus 9 tablet developed by Google and the Open Handset Alliance OHA, and the NVIDIA camera driver is one of the camera drivers used in it. An elevation of privilege vulnerability exists in the NVIDIA GPU driver on Google...

Google Pixel NVIDIA GPU Driver elevation of privilege vulnerability (CNVD-2017-00175)

The Google Pixel C is a tablet computer from Google, U.S. The NVIDIA GPU is an NVIDIA graphics processor driver component used in... An elevation of privilege vulnerability exists in Google Nexus. An attacker can exploit the vulnerability to execute arbitrary code with elevated privileges in the...

Google Nexus NVIDIA GPU Driver Elevation of Privilege Vulnerability

Android on Nexus 9 is a Linux-based open source operating system for the Nexus 9 tablet PC developed by Google and the Open Handheld Alliance OHA.The NVIDIA GPU Driver is one of the NVIDIA GPU drivers that is used in the... An elevation of privilege vulnerability exists in the NVIDIA GPU Driver o...

Apple macOS Sierra Intel Graphics Driver Memory Misreference Vulnerability

Apple macOS Sierra is a dedicated operating system developed by Apple for Mac computers.Intel Graphics Driver is one of the drivers for the graphics card. A memory misreference vulnerability exists in Intel Graphics Driver in Apple macOS Sierra versions prior to 10.12. The vulnerability can be...

Google Nexus Qualcomm bootloader elevation of privilege vulnerability

Android on Nexus 5 is an open source Linux-based operating system developed by Google and the Open Handheld Alliance OHA for the Nexus 5, etc. Qualcomm bootloader is a Qualcomm bootloader that is used in the Nexus 5. Qualcomm bootloader is a Qualcomm-developed bootloader. An elevation of privileg...

Street Fighter 5 - 'Capcom.sys' Kernel Execution (Metasploit) Exploit

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule...

Street Fighter 5 - Capcom.sys Kernel Execution (Metasploit)

Street Fighter 5 - Capcom.sys Kernel Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule...

Street Fighter 5 - 'Capcom.sys' Kernel Execution (Metasploit)

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/post/windows/reflectivedllinjection' require 'rex' class MetasploitModule 'Windows Capcom.sys Kernel Execution Exploit x64 only',...

Windows Capcom.sys Kernel Execution Exploit (x64 only)

This Metasploit module abuses the Capcom.sys kernel driver's function that allows for an arbitrary function to be executed in the kernel from user land. This function purposely disables SMEP prior to invoking a function given by the caller. This has been tested on Windows 7 x64. This module...

Windows Capcom.sys Kernel Execution Exploit (x64 only)

This module abuses the Capcom.sys kernel driver's function that allows for an arbitrary function to be executed in the kernel from user land. This function purposely disables SMEP prior to invoking a function given by the caller. This has been tested on Windows 7, 8.1, 10 x64 and Windows 11 x64...