Google Android System UI Local Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. system UI is the system interface that comes with Android. A local elevation of privilege vulnerability exists in System UI in Android 7.0. A local attacker can exploit this...

CVE-2016-7221: Undefined Security Weakness

Input Method Editor IME in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles DLL loading, which allows local users to gain privileges via...

CVE-2016-7238: Undefined Security Weakness

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandle caching for NTLM password-change requests, which allows local users to gain privileges v...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-10978)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the implementation of the Windows Common Log File System CLFS driver that does not properly handle memory objects. Successful exploitation could allow an attacker to run processes with...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-11013)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Windows Common Log File System CLFS driver that does not properly handle memory objects. An attacker could be allowed to exploit the vulnerability t...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2016-10534)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in NVIDIA Windows GPU Display Driver, which arises from the program failing to properly validate values. A local attacker could...

CVE-2016-0075

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of...

CVE-2016-0073

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of...

Microsoft Windows Kernel Local Elevation of Privilege Vulnerability (CNVD-2016-09369)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the implementation of the Windows kernel API that allows users to access registry information. This vulnerability could be exploited by a local attacker to elevate privileges via a...

CVE-2016-0079: Exposure of Sensitive Information to an Unauthorized Actor

The kernel in Microsoft Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of Privilege Vulnerability."...

Multiple Local Elevation of Privilege Vulnerabilities in Juniper Junos

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. Juniper Junos has multiple local elevation of privilege vulnerabilities that could be exploited by a local...

CVE-2016-0073: Exposure of Sensitive Information to an Unauthorized Actor

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of...

CVE-2016-0070: Exposure of Sensitive Information to an Unauthorized Actor

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitiv...

CVE-2016-3270: Undefined Security Weakness

The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Win32k...

CVE-2016-0075: Exposure of Sensitive Information to an Unauthorized Actor

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of...

Microsoft Windows Diagnostics Hub Local Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local elevation of privilege vulnerability exists in Microsoft Windows Diagnostics Hub. An attacker could use elevated system privileges to run arbitrary code...

WampServer v3.0.6 - Insecure File Permissions

Document Title: =============== WampServer v3.0.6 - Insecure File Permissions References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1964 Release Date: ============= 2016-09-30 Vulnerability Laboratory ID VL-ID: ==================================== 1964 Common...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-07746)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows 10 Gold, 1511 and 1607 versions. A local attacker can exploit the vulnerability to execute arbitrary code with system administrator...

Google Android Local Elevation of Privilege Vulnerability (CNVD-2016-07437)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Settings in Android suffers from a local boost vulnerability that originates from a program bypassing factory reset protection. A local attacker could exploit the vulnerability to...

Joyent Smart Data Center 'Docker API' Local Elevation of Privilege Vulnerability

Joyent Smart Data Center SDC is an open source cloud management platform from Joyent, Inc. A local elevation of privilege vulnerability exists in the Joyent Smart Data Center 'Docker API'. A local attacker could exploit this vulnerability to execute arbitrary code with elevated privileges...