CVE-2024-39438

The CVE-2024-39438 issue affects the linkturbonative service, caused by improper input validation that enables command injection. Exploitation could grant local escalation to SYSTEM-equivalent privileges. Connected sources (PT-2024-28497, NVD/ CVE records, Red Hat advisory) confirm the vulnerabil...

CVE-2024-39437

In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2024-39436

In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed...

PT-2024-28497 · Unknown · Linkturbonative

Name of the Vulnerable Software and Affected Versions: linkturbonative affected versions not specified Description: The linkturbonative service has a command injection issue due to improper input validation, which could lead to local escalation of privilege with System execution privileges needed...

CVE-2024-27458 HP Hotkey Support – Escalation of Privilege

A potential security vulnerability has been identified in the HP Hotkey Support software, which might allow local escalation of privilege. HP is releasing mitigation for the potential vulnerability. Customers using HP Programmable Key are recommended to update HP Hotkey Support...

CVE-2024-27458

HP Hotkey Support is affected by a local privilege escalation vulnerability (CVE-2024-27458). The HP advisory HPSBHF03977 indicates mitigation via updates to HP Hotkey Support for affected platforms; Nessus notes the vulnerability in versions prior to 8.10.42.190. HP Programmable Key users are sp...

CVE-2024-20092

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1700...

CVE-2024-20090

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1703...

CVE-2024-20099

CVE-2024-20099: A power-module out-of-bounds write due to a missing bounds check enables local escalation to SYSTEM privileges with no user interaction. A patch is referenced (ALPS08997492; MSV-1625). Affected component is described as the power subsystem; exact product/version details are not sp...

CVE-2024-20098

In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996886; Issue ID: MSV-1626...

CVE-2024-20090

CVE-2024-20090 is a MediaTek vdec vulnerability: an out-of-bounds write caused by a missing bounds check, enabling local escalation of privilege with SYSTEM privileges; no user interaction is required. Patch ALPS09028313; Issue MSV-1703. Related documents confirm vdec involvement in MediaTek comp...

PUB-A-328221525

there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-349780950

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PUB-A-349428550

In lwisallocatorfree of lwisallocator.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-346633576

In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-340720879

In vringsize of external/headers/include/virtio/virtioring.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-354263469

In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-354268756

In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-323163451

In lwisdeviceeventstatesclearlocked of lwisevent.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-346635977

In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...