Microsoft Windows Input Method Editor Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Input Method Editor IME is one of the input method editors. A remote code execution vulnerability exists in Input Method Editor in Microsoft Windows that stems from the program failing to properly...

Apple macOS Sierra Audio memory corruption vulnerability

Apple macOS Sierra is a specialized operating system developed by Apple Inc. for Mac computers.The audio component is one of the audio components. A memory corruption vulnerability exists in the Audio component of Apple macOS Sierra before 10.12.6. A remote attacker can exploit this vulnerability...

Vulnerability of Windows operating system kernel drivers, which allows attackers to increase their privileges

The vulnerability of Windows operating system kernel drivers is related to incorrect handling of objects in memory by the kernel-level driver. Exploiting this vulnerability can allow a local attacker to enhance their privileges through a specially created application...

Apple iOS and Safari WebKit Memory Corruption Vulnerability (CNVD-2017-07604)

Apple iOS and Safari are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser that comes with Mac OS X and iOS operating systems; WebKit is an open-source web browser engine developed by KDE, Apple, Google,...

The vulnerability of the iOS operating system, the Safari browser, and the iTunes multimedia player allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system, Safari browser, and iTunes multimedia player is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...

VMware Workstation 12.x < 12.5.5 Multiple Vulnerabilities (VMSA-2017-0006)

The version of VMware Workstation installed on the remote Windows host is 12.x prior to 12.5.5. It is, therefore, affected by multiple vulnerabilities : - A heap buffer overflow condition exists due to improper validation of certain input. An attacker on the guest can exploit this to cause a deni...

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...

Critical product security update: Virtuozzo 7.0 Update 3 Hotfix 1 (7.0.3-639)

The new packages for Virtuozzo 7.0.3 introducing security fixes as well as usability and stability bug fixes. Vulnerability id: PSBM-58281 A flaw found in the way prl-vzvncserver parsed terminal escape sequences that could allow a remote attacker authenticated with the VNC password or a user logg...

Microsoft SQL Server 2008 R2 SP3 10.50.6500.0 through 10.50.6525.0 Multiple Vulnerabilities (3045314)

Binary data 9818.prm...

Microsoft SQL Server 2012 SP2 11.0.5500.0 through 11.0.5592.0 Multiple Vulnerabilities (3045319)

Binary data 9827.prm...

Linux kernel denial of service vulnerability (CNVD-2016-09488)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the mm/memory.c file in Linux kernel versions prior to 4.1.4, which stems from a program's failure to properly handle anonymous pages. A loc...

Qemu: virtio: unbounded memory allocation on host via guest leading to DoS

Quick Emulator QEMU built with the virtio framework is vulnerable to an unbounded memory allocation issue. It was found that a malicious guest user could submit more requests than the virtqueue size permits. Processing a request allocates a VirtQueueElement results in unbounded memory allocation ...

Apple OS X El Capitan IOSurface Memory Misreference Vulnerability

Apple OS X is a specialized operating system developed for Mac computers. A memory misreference vulnerability exists in IOSurface for Apple OS X El Capitan 1, which can be exploited by a local attacker to elevate privileges...

The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality of protected information

The vulnerability exists in Mozilla Firefox due to improper initialization of memory intended for displaying GIFs. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the process’s memory by using a specially crafted web script that interacts with...

spice: Host memory access from guest with invalid primary surface parameters

A memory access flaw was found in the way spice handled certain guests using crafted primary surface parameters. A user in a guest could use this flaw to read from and write to arbitrary memory locations on the host...

DEBIAN-CVE-2016-1669

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impa...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the Google Chrome browser extension is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure the continued use of resources after they are freed or have other effects through t...

Microsoft Internet Explorer Memory Error Reference Remote Code Execution Vulnerability (CNVD-2016-01536)

Internet Explorer is a web browser from Microsoft. A vulnerability in the handling of "range" type HTML input elements in some versions of Internet Explorer can be exploited by an attacker with a malicious web page or file to reuse a freed memory structure to execute arbitrary code in the context...

Adobe Flash Player Memory Error Referencing Arbitrary Code Execution Vulnerability (CNVD-2015-08260)

Adobe Flash Player is a widely used, proprietary multimedia program player. It was originally written by Macromedia and continued to be developed and distributed by Adobe after Macromedia was acquired by Adobe. A memory misreference vulnerability exists in Adobe Flash Player's handling of special...

Design/Logic Flaw

The 1 libxlsetmemorytarget function in tools/libxl/libxl.c and 2 libxlbuildpost function in tools/libxl/libxldom.c in Xen 3.4.x through 4.6.x do not properly calculate the balloon size when using the populate-on-demand PoD system, which allows local HVM guest users to cause a denial of service...