Alertus Desktop Notification for OS X Design Vulnerability

Alertus Desktop Notification for OS X is a suite of desktop notification software from Alertus Inc. for OS X, a specialized operating system developed for Mac computers. A security vulnerability exists in Alertus Desktop Notification for OS X prior to version 2.9.30.1710, which arises from the...

Microsoft Win32k Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows 10 Gold and 1511 that stems from a program failing to properly handle objects in memory. A local attacker is allowed to exploit the...

Microsoft Windows SMB Server Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A security vulnerability in the implementation of the Microsoft Windows SMB server component allows local attackers to gain elevated privileges via a constructed application that exploits this...

FlashFXP v5.3.0 (Win) - Memory Corruption Vulnerability

Document Title: =============== FlashFXP v5.3.0 Win - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1853 Release Notes: https://www.flashfxp.com/history-latest FlashFXP v5.4.0.3935 Release Date: ============= 2016-06-13...

FlashFXP v5.3.0 (Win) - Memory Corruption Vulnerability

Document Title: =============== FlashFXP v5.3.0 Win - Memory Corruption Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1853 Release Notes: https://www.flashfxp.com/history-latest FlashFXP v5.4.0.3935 Release Date: ============= 2016-06-12...

QEMU Denial of Service Vulnerability (CNVD-2016-03939)

QEMU is a suite of analog processor software. QEMU suffers from a denial of service vulnerability that can be exploited by a local attacker to trigger an OOB write access or crash the QEMU process...

Multiple Vulnerabilities in HPE Matrix Operating Environment (CNVD-2016-03736)

HPE Matrix Operating Environment is a suite of cloud management software designed for infrastructure services. HPE Matrix Operating Environment has multiple security vulnerabilities that could be exploited by a local attacker to obtain sensitive information, execute arbitrary code, gain...

(Pwn2Own) Apple OS X WindowServer Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of CFData...

(Pwn2Own) Apple OS X IntelAccelerator Out-Of-Bounds Indexing Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the...

Apple OS X IOAudioFamily Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the IOAudioFamily kern...

Linux kernel BPF Denial of Service Vulnerability

Linux kernel is an open source operating system. Linux kernel bpf has a security vulnerability that allows local attackers to conduct denial of service attacks...

Linux kernel denial of service vulnerability (CNVD-2016-03194)

Linux kernel is an open source operating system. Linux kernel suffers from a denial of service vulnerability that allows local attackers can exploit to crash the system...

Linux kernel information disclosure vulnerability (CNVD-2016-03218)

Linux kernel is an open source operating system. A security vulnerability exists in Linux kernel sound/core/timer, which allows local attackers to exploit the vulnerability to obtain sensitive information...

(Pwn2Own) Microsoft Windows PFFOBJ::bDeleteLoadRef Font Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

(Pwn2Own) Microsoft Windows win32kfull.sys Surface Object Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how...

(Pwn2Own) Microsoft Windows dxgkrnl Kernel Driver Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of t...

Samsumg android phone denial of service vulnerability

Samsumg android phone is a series of cell phone products based on Android platform. The Samsumg android system service fails to properly handle exceptions, allowing local attackers to conduct denial of service attacks by sending malicious service commands...

Samsumg android phone denial of service vulnerability (CNVD-2016-02879)

Samsumg android phone is a series of cell phone products based on Android platform. The Samsumg android system service fails to properly handle exceptions, allowing local attackers to conduct denial of service attacks by sending malicious service commands...

Libpam-sshauth Local Privilege Vulnerability

libpam-sshauth is a PAM module that can be used to authenticate users on a local computer by connecting to a remote server via ssh. A programming error in libpam-sshauth allows local attackers to exploit this vulnerability to gain root privileges...

Joyent SmartOS dtrace Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose information on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the dtrace implementation in SmartOS. A functi...