CVE-2020-17087

CVE-2020-17087 is a Windows Kernel Local Privilege Escalation vulnerability tied to a heap-based overflow in cng.sys. Connected exploit sources describe a local-vector attack requiring initial code execution, then abusing an IOCTL to .\\.GLOBALROOT\Device\Cng with a crafted size parameter that ca...

Patch Tuesday - November 2020

Jumping right back to a triple digit volume of vulnerabilities resolved, Microsoft covers 112 CVEs this November affecting products ranging from our standard Windows Operating Systems and Microsoft Office products to some new entries such as Azure Sphere. Microsoft CVE-2020-17087: Windows Kernel...

CVE-2020-7207

CVE-2020-7207 affects HPE ProLiant Gen10 servers with Intel Innovation Engine. The vulnerability enables local privilege escalation via physical access to the server motherboard. Root cause: compromised access to hardware/platform state enables elevation of privileges; impact includes high confid...

Adobe Acrobat and Reader Local Elevation of Privilege Vulnerability

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. A local elevation of privilege vulnerability exists in Adobe Acrobat and Reader. The vulnerability stems from the presence of a race condition. An attacker...

CVE-2020-0405

In NetworkStackNotifier, there is a possible permissions bypass due to an unsafe implicit PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-157475...

CVE-2020-0790

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity. This vulnerability by itself does not allow arbitrary code...

CVE-2020-0790

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity. This vulnerability by itself does not allow arbitrary code...

Remote code execution

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity. This vulnerability by itself does not allow arbitrary code...

Siemens Automation License Manager Local Elevation of Privilege Vulnerability

Siemens Automation License Manager is a Siemens system for processing remote and local licenses for HMI, SCADA and industrial products. Siemens Automation License Manager local elevation of privilege vulnerability. The vulnerability is due to the application failing to properly validate a user's...

CVE-2020-0219

In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-122836081...

CVE-2020-0219

In onCreate of SliceDeepLinkSpringBoard.java there is a possible insecure Intent. This could lead to local elevation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-122836081...

CVE-2020-7137

The CVE-2020-7137 issue affects HPE Superdome Flex Server’s RMC component. A validation flaw can lead to local elevation of privilege. Affected product: HPE Superdome Flex Server (RMC). Root cause: input/validation failure in RMC that allows escalation of privileges. Impact (as stated): local ele...

Docker Desktop Local Elevation of Privilege Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

CVE-2020-9540

Technical details about CVE-2020-9540 are not publicly available in the provided documents; no affected products, exploit vectors, or fixes are disclosed here. Monitor for updates.

CVE-2019-9467

In the Bootloader, there is a possible kernel command injection due to missing command sanitization. This could lead to a local elevation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

Cisco Firepower Threat Defense Local Elevation of Privilege Vulnerability

Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services. A security vulnerability exists in the Cisco Firepower Threat Defense CLI that allows a local attacker to exploit the vulnerability by submitting a special request to gain ROOT privilege...

Google Android Local Elevation of Privilege Vulnerability (CNVD-2019-38253)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. Google Android suffers from a local elevation of privilege vulnerability that can be exploited by an attacker to gain root access to the device...

Trusted Path Elevation of Privilege Vulnerability in Micropoint Baihui Intelligent Defense Software Enterprise Edition

Micropoint Baihui Intelligent Defense Software Enterprise Edition is a new generation of network antivirus products developed by Micropoint Baihui for enterprise network virus protection and management characteristics. The enterprise version of Micropoint Intelligent Defense Software has a truste...

Trusted Path Elevation of Privilege Vulnerability in FireWool Security Software

Firedown Security is a computer security software. FireFlush Security Software has a trusted path elevation of privilege vulnerability that can be exploited by an attacker to gain server privileges through a local elevation of privilege...

Windows suffers from a local elevation of privilege vulnerability

Windows 10 is an operating system developed by Microsoft Corporation in the United States for use in computers and tablets. Windows suffers from a local elevation of privilege vulnerability that allows an attacker to run specially designed applications to elevate privileges...