Microsoft Windows AppX Deployment Server Local Elevation of Privilege Vulnerability

Microsoft Windows Server and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Windows AppX Deployment Server is one of the application deployment...

Multiple Vulnerabilities in Splunk Universal Forwarder

The Splunk Universal Forwarder collects data from a data source or another forwarder and sends it to a forwarder or a deployment of Splunk. The Universal Forwarder can send data to SplunkEnterprise, Splunk Light, or Splunk Cloud, and it also replaces the Splunk Enterprise Light Forwarder and is...

Linux Kernel Local Elevation of Privilege Vulnerability (CNVD-2019-06579)

Linux is an open source operating system, a collective term for a class of Unix computer operating systems. A local elevation of privilege vulnerability exists in Linux Kernel. An attacker can exploit this vulnerability to gain privileges...

Microsoft Windows RemoteFX Virtual GPU Microport Driver Local Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. Microsoft Windows suffers from a local elevation of privilege vulnerability. An attacker could exploit this issue to gain elevated privileges...

Microsoft Windows 10 Build 17134 Local Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. Microsoft Windows 10 Build 17134 suffers from a local elevation of privilege vulnerability. An attacker exploiting this vulnerability can make system privileges prompt...

Microsoft Windows NTFS Local Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows Server 2019 is a set of operating systems used for servers.Windows 10 is a set of operating systems used for personal computers. A local elevation of privileg...

Microsoft Windows Subsystem for Linux Local Elevation of Privilege Vulnerability

Microsoft Windows Server version 1803 and Windows 10 are both products of Microsoft Corporation.Microsoft Windows Server version 1803 is a server operating system.Windows 10 is an operating system for personal computers. Windows 10 is an operating system for personal computers. Windows Subsystem...

Microsoft Windows Registry Local Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Registry is one of the registries used to store information about system and application settings. A local elevation of privilege vulnerability exists in Microsoft Windows. A local attacker can exploi...

Microsoft Windows DirectX Graphics Kernel Local Elevation of Privilege Vulnerability (CNVD-2018-19383)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. DirectX Graphics Kernel is one of the graphics kernel drivers. A local elevation of privilege vulnerability exists in Microsoft Windows DirectX Graphics Kernel, which arises from the...

Windows Exploitation Tricks: Exploiting Arbitrary Object Directory Creation for Local Elevation of Privilege

Posted by James Forshaw, Project Zero And we’re back again for another blog in my series on Windows Exploitation tricks. This time I’ll detail how I was able to exploit Issue 1550 which results in an arbitrary object directory being created by using a useful behavior of the CSRSS privileged...

Microsoft Windows Kernel 'Win32k.sys' Local Elevation of Privilege Vulnerability

Microsoft Windows 7, etc. are operating systems released by Microsoft Corporation in the U.S. Win32k is the 32-bit environment of its operating system. A local elevation of privilege vulnerability exists in Microsoft Windows Kernel 'Win32k.sys', which stems from a program's failure to properly...

Microsoft Windows DirectX Graphics Kernel Local Elevation of Privilege Vulnerability (CNVD-2018-11544)

Microsoft Windows Server 2016 and others are operating systems released by Microsoft Corporation USA.DirectX Graphics Kernel DXGKRNL is one of the graphics kernel drivers. A local elevation of privilege vulnerability exists in Microsoft Windows DirectX Graphics Kernel, which stems from the progra...

Intel Software Guard Extension Local Elevation of Privilege Vulnerability

Intel Software Guard Extensions Platform Software Component is a set of software components for the Software Guard Extensions Platform from Intel Corporation. A local elevation of privilege vulnerability exists in Intel Software Guard Extensions. A local attacker could exploit this vulnerability ...

CVE-2017-13273: Undefined Security Weakness

In xtqtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-65853158...

CVE-2017-13247

In the Pixel 2 bootloader, there is a missing permission check which bypasses carrier bootloader lock. This could lead to local elevation of privileges with user execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID:...

Out-of-bounds

In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-67962232...

CVE-2017-13231

In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-67962232...

CVE-2017-13231

In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-67962232...

CVE-2017-13231

In libmediadrm, there is an out-of-bounds write due to improper input validation. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 8.0, 8.1. Android ID: A-67962232...

PT-2018-5534

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a missing permission check in the Pixel 2 bootloader, which can bypass the carrier bootloader lock. This could lead to local elevation of privileges, with user execution privileges needed fo...