CVE-2019-8561

A logic issue was addressed with improved validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to elevate privileges...

CVE-2019-8602

CVE-2019-8602 describes a memory corruption issue in Apple software that was mitigated by removing the vulnerable code. It is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, and iCloud for Windows 7.12. A malicious application may be able to elevate p...

CVE-2019-8602

A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A malicious application may be able to elevate privileges...

CVE-2019-8542

A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious application may be able to elevate privileges...

CVE-2019-8511

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, watchOS 5.2. A malicious application may be able to elevate privileges...

PT-2019-19093 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.14.4 Description: A logic issue was addressed with improved validation, which may allow a malicious application to elevate privileges. Recommendations: For versions prior to 10.14.4, update to macOS Mojave 10.14.4 t...

Microsoft UPnP Local Privilege Elevation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/registry' require 'msf/core/exploit/exe'...

Cyrus IMAP Elevation of Privilege Vulnerability

Cyrus IMAP is a Unix and Linux-based operating system for supporting IMAP Interactive Mail Access Protocol protocol open source mail server . A security vulnerability exists in Cyrus IMAP versions prior to 2.5.15, 3.0.x prior to 3.0.13, and 3.1.x through 3.1.8. An attacker can exploit the...

Kyrol Internet Security Invalid Pointer Vulnerability

Kyrol Internet Security is an antivirus product from Malaysia. An invalid pointer vulnerability exists in the IOCTL handling of the kyrld.sys driver in Kyrol Internet Security 9.0.6.9, which stems from the fact that the use of 0x9C402405 with METHODNEITHER results in the reading of the original...

Intel NUC Integer Overflow Vulnerability

The Intel NUC 8 Mainstream Game Kit, among others, is a small desktop computer from Intel Corporation USA. An integer overflow vulnerability exists in the firmware of the Intel NUC, which can be exploited by a local attacker to elevate privileges...

Veracrypt has an unspecified vulnerability

Veracrypt is a disk encryption program based on TrueCrypt. A security vulnerability exists in VeraCrypt version 1.24. An attacker can exploit the vulnerability to elevate privileges...

CVE-2019-19248

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...

CVE-2019-19248

Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...

Ubuntu: Security Advisory (USN-4183-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KB4530681: Windows 10 December 2019 Security Update

The remote Windows host is missing security update 4530681. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious...

EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-2531)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The powermateprobe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a...

Intel Active Management Technology Cross-Site Scripting Vulnerability

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. A cross-site scripting vulnerability exists in Intel Active Management Technology. An attacker could exploit this vulnerability to elevate privileges...

CVE-2019-17437

An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. This issue affects PAN-OS 7.1 versions prior to 7.1.25; 8.0 versions prior to 8.0.20; 8.1 versions prior to 8.1.11; 9....

Authentication flaw

An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. This issue affects PAN-OS 7.1 versions prior to 7.1.25; 8.0 versions prior to 8.0.20; 8.1 versions prior to 8.1.11; 9....

Google Android System Elevation of Privilege Vulnerability (CNVD-2019-44274)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Google Android version 10. The vulnerability can be exploited by an attacker to elevate privileges...