CVE-2023-40109

In createFromParcel of UsbConfiguration.java, there is a possible background activity launch BAL due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-40100

CVE-2023-40100 affects Android via a memory corruption in the discovery_thread of Dns64Configuration.cpp caused by a use-after-free. This can lead to local elevation of privilege with no extra execution privileges required and no user interaction needed, per multiple sources. The vulnerability is...

kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...

SUSE CVE-2024-22029

Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root...

PT-2024-12848 · Google · Android

Name of the Vulnerable Software and Affected Versions: MtpPacket.cpp affected versions not specified Description: The issue is related to a heap buffer overflow due to an out of bounds write in multiple functions of MtpPacket.cpp. This could lead to local escalation of privilege with no additiona...

PT-2024-15305 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is caused by a logic error in the code, allowing the capture of the device screen when disallowed by device policy. This could lead to local escalation of privilege with no...

Intel Thunderbolt DCH drivers security vulnerability

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability previously existed in Intel ThunderboltTM DCH drivers for Windows version 88, which stemmed from improper input validation on affected products. This could result in an authenticated user...

PT-2024-8892 · Intel · Intel(R) Hid Event Filter

Name of the Vulnerable Software and Affected Versions: IntelR HID Event Filter software versions prior to 2.2.2.1 Description: The issue is related to insecure inherited permissions in some IntelR HID Event Filter software installers, which may allow an authenticated user to potentially enable...

PT-2024-1710 · Microsoft · Windows Ntfs +2

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Microsoft Windows NTFS affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Kernel, which can be exploited due to...

PT-2024-12771 · Unknown · Raidenftpd

Name of the Vulnerable Software and Affected Versions: RaidenFTPD version 2.4 build 4005 Description: The issue allows a local attacker to gain privileges and execute arbitrary code via a crafted executable running from the installation directory. This is due to an Insecure Permissions problem in...

kernel: ktls overwrites readonly memory pages when using function splice with a ktls socket as destination

An out-of-bounds memory write flaw was found in the Linux kernel’s Transport Layer Security functionality in how a user calls a function splice with a ktls socket as the destination. This flaw allows a local user to crash or potentially escalate their privileges on the system...

CVE-2024-22012

there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-22012

CVE-2024-22012 : A Google Pixel-related out-of-bounds write due to a missing bounds check can lead to local privilege escalation without user interaction. Affected component: Pixel bootloader (per Pixel Update Bulletin).CVSS shows LOCAL access, LOW exploit complexity, and HIGH confidentiality/int...

CVE-2024-20010

In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08358560; Issue ID: ALPS08358560...

CVE-2024-20006

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08477148; Issue ID: ALPS08477148...

Out-of-bounds

In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08477148; Issue ID: ALPS08477148...

Privilege escalation

In telephony, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08441419; Issue ID: ALPS08441419...

Out-of-bounds

In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08471742; Issue ID: ALPS08308608...

CVE-2024-20002

In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03961715; Issue ID: DTV03961715...

CVE-2024-20002

CVE-2024-20002 affects TVAPI with an out-of-bounds write caused by a missing bounds check. The vulnerability allows local escalation to SYSTEM with no user interaction required, as indicated by both NVD and Red Hat entries. The impact is limited to local privilege escalation with high confidentia...