CVE-2017-0080: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." This vulnerability is different from those described in CVE-2017-0024, CVE-2017-0026,...

Microsoft Windows Graphics Local Mobilization Vulnerability (CNVD-2017-03621)

Microsoft Windows is an operating system developed by the American company Microsoft. A local elevation vulnerability exists in Microsoft Windows Graphics. An attacker could exploit this vulnerability to execute arbitrary code with kernel privileges...

Microsoft Windows Local Lift Vulnerability (CNVD-2017-03624)

Microsoft Windows is an operating system developed by the American company Microsoft. Microsoft Windows suffers from a local elevation vulnerability. An attacker could exploit this vulnerability to execute arbitrary code with kernel privileges...

Microsoft Windows Kernel Local Mobilization Vulnerability (CNVD-2017-03625)

Microsoft Windows is an operating system developed by the American company Microsoft. Microsoft Windows suffers from a local elevation vulnerability. An attacker could exploit this vulnerability to execute arbitrary code with kernel privileges...

Microsoft Windows Local Lift Vulnerability (CNVD-2017-03628)

Microsoft Windows is an operating system developed by the American company Microsoft. Microsoft Windows suffers from a local elevation vulnerability. An attacker could exploit this vulnerability to execute arbitrary code with kernel privileges...

MagniComp Sysinfo Local Elevation of Privilege Vulnerability

MagniComp SysInfo is a single system agent and viewer from MagniComp that provides most major Linux, UNIX, Apple Macintosh, and Microsoft Windows platforms, as well as leading NAS and SAN storage systems and logical volume software solutions, with extensive IT asset inventory and configuration...

IBM Tivoli System Automation for Multiplatforms Local Elevation of Privilege Vulnerability

IBM Tivoli System Automation for Multiplatforms is a set of clustering solutions from IBM in the United States. The solution provides features such as system failure detection and initiating automatic correction operations.IBM Reliable Scalable Cluster Technology is one of the components that...

CVE-2017-0307: Integer Overflow or Wraparound

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2017-0509: Undefined Security Weakness

An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing t...

NVIDIA GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-02203)

NVIDIA GPU Driver is a set of graphics processor GPU drivers from NVIDIA. A local elevation of privilege vulnerability exists in NVIDIA GPU Driver. A local attacker could use this vulnerability to gain elevated privileges and perform unauthorized operations, with a failed attack resulting in a...

NVIDIA GPU Display Driver Local Elevation of Privilege Vulnerability

NVIDIA GPU Driver is a set of graphics processor GPU drivers from NVIDIA. A local elevation of privilege vulnerability exists in NVIDIA GPU Driver. A local attacker could use this vulnerability to gain elevated privileges and perform unauthorized operations, with a failed attack resulting in a...

EMC Avamar Data Store and EMC Avamar Virtual Edition Local Elevation of Privilege Vulnerability

EMC Avamar Data Store ADS and EMC Avamar Virtual Edition AVE are both backup and recovery solutions from EMC Corporation. The solutions provide data backup, disaster recovery, and deduplication elimination. A security vulnerability exists in EMC ADS and AVE versions 7.3.0 and 7.3.1. An attacker...

UBUNTU-CVE-2017-0429

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

PT-2017-1049

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.18 Description An elevation of privilege issue in the NVIDIA libomx library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High...

CVE-2016-6759: Improper Access Control

An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not...

CVE-2016-8458: Undefined Security Weakness

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

Nagios Incompletely Fixes Local Elevation of Privilege Vulnerability

Nagios is an American programmer Ethan Galstad developed a set of open source system status and network information monitoring program. The program provides network service monitoring, host resource monitoring, SMS alerts and other functions. Nagios has a local elevation of privilege vulnerabilit...

PT-2016-7293

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 and R2 SP1 Microsoft Windows 7 version SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 versions Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10...

Lenovo Notebook and ThinkServer Local Elevation of Privilege Vulnerability

Lenovo Notebook and ThinkServer are both products of the Chinese company Lenovo. The former is a line of laptops and the latter is a line of servers. A local elevation of privilege vulnerability exists in the Lenovo Notebook and ThinkServer systems. An attacker could exploit this vulnerability to...

CVE-2016-6715: Improper Access Control

An elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could allow a local malicious application to record audio without the user's permission. This issue is rated as...