Bluetooth buffer overflow vulnerability in multiple MediaTek chips (CNVD-2022-66253)

MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...

Multiple MediaTek Chip WLAN Driver Input Validation Error Vulnerability

MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...

Thales Safenet Authentication Client 后置链接漏洞

Thales Group Thales Safenet Authentication Client is an authentication client from Thales Group, Inc. .7 and earlier versions contain an elevation of privilege vulnerability that stems from the creation of temporary files with insecure privileges, which could be exploited by a local attacker to...

CVE-2021-3969: Time-of-check Time-of-use (TOCTOU) Race Condition

A Time of Check Time of Use TOCTOU vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker to elevate privileges...

Acronis Snap Deploy 代码问题漏洞

Acronis Snap Deploy is an Acronis platform for bulk deployment of system images. Acronis Snap Deploy is vulnerable to a DLL hijacking vulnerability, which originates when a process attempts to load a DLL without specifying the absolute path to the DLL, and can be exploited by an attacker to cause...

CVE-2022-0354

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window...

Ivanti DSM Remote 及 代码问题漏洞

Ivanti DSM Remote is a multi-platform, unified endpoint management solution from Ivanti Corporation. A security vulnerability exists in Ivanti DSM Remote version 6.3.1.1862 and prior versions, which stems from vulnerability to unquoted service paths. A local attacker can use this vulnerability to...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from an integer overflow in libstagefright that could result in an out-of-bounds write. An attacker could exploit this vulnerability to caus...

User Profile Arbitrary Junction Creation Local Privilege Elevation

The user profile service, identified as ProfSrv, is vulnerable to a local privilege elevation vulnerability in its CreateDirectoryJunction function due to a lack of appropriate checks on the directory structure of the junctions it tries to link together. Attackers can leverage this vulnerability ...

UltraVNC 安全漏洞

UltraVNC is an open source remote terminal control software for the Windows platform. versions of UltraVNC prior to 1.3.8.0 have a security vulnerability in the DSM plug-in that can be exploited by a locally authenticated attacker to achieve Local Elevation of Privilege LPE on vulnerable systems...

CVE-2022-26319: Uncontrolled Search Path Element

An installer search patch element vulnerability in Trend Micro Portable Security 3.0 Pro, 3.0 and 2.0 could allow a local attacker to place an arbitrarily generated DLL file in an installer folder to elevate local privileges. Please note: an attacker must first obtain the ability to execute...

MediaTek 芯片 资源管理错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called Mediatek. A security vulnerability exists in a number of MediaTek chips, which stems from a possible memory corruption when released after use in apusys. This could result in a local elevation of privilege that requires...

Google Android 安全漏洞

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for short. an elevation of privilege vulnerability exists in the TvInputManager component of Google Android, which could be exploited by an attacker to cause a local elevation of privilege...

PT-2021-11614

Name of the Vulnerable Software and Affected Versions: FlashGet version 1.9.6 Description: A buffer overflow was discovered in the current path directory function, allowing attackers to elevate local process privileges by overwriting the registers. Recommendations: For FlashGet version 1.9.6,...

CVE-2021-30827

A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local attacker may be able to elevate their privileges...

CVE-2021-30832: Out-of-bounds Write

A memory corruption issue was addressed with improved state management. This issue is fixed in Security Update 2021-005 Catalina, macOS Big Sur 11.6. A local attacker may be able to elevate their privileges...

KB5006699: Windows Server 2022 Security Update (October 2021)

The remote Windows host is missing security update 5006699. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself is...

Adobe Acrobat Reader DC out-of-bounds read vulnerability

Adobe Acrobat Reader is a PDF viewer from Adobe. The software is used to print, sign and annotate PDFs. Adobe Acrobat Reader DC suffers from an out-of-bounds read vulnerability that can be exploited by attackers to locally elevate privileges in the context of the current user...

CVE-2021-30739

A local attacker may be able to elevate their privileges. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A memory corruption issue was addressed with improved validation...

CVE-2021-30724: Undefined Security Weakness

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local attacker may be able to elevate their privileges...