HPSBHF03631 rev. 6 - BIOS Privilege Elevation Vulnerability

Potential Security Impact Elevation of privilege Source: HP, HP Product Security Response Team PSRT Reported by: yngwei @yngweijw of IIE VARAS, MengHao, Li of IIE VARAS and driedfish @d3af1sh of IIE VULNERABILITY SUMMARY A potential security vulnerability has been identified which involves possib...

Trusted Path Elevation of Privilege Vulnerability in Micropoint Baihui Intelligent Defense Software Enterprise Edition

Micropoint Baihui Intelligent Defense Software Enterprise Edition is a new generation of network antivirus products developed by Micropoint Baihui for enterprise network virus protection and management characteristics. The enterprise version of Micropoint Intelligent Defense Software has a truste...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Rational ClearQuest (CVE-2018-1890, CVE-2018-12547, CVE-2019-2426)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 7 and 8, which are used by IBM Rational ClearQuest. These issues were disclosed as part of the IBM Java SDK updates in March 2019. Vulnerability Details CVEID: CVE-2018-1890 DESCRIPTION: IBM SDK, Java Technology...

CVE-2019-16097:Harbor privilege elevation vulnerability alerts-a vulnerability alert-the black bar safety net

2019 9 May 19, 360CERT observed abroad security researcher Aviv Sasson found Harbor there is elevation of Privilege Vulnerability, the Harbor in the default configuration register the function is open, the attacker can register functions using the vulnerability to gain administrator privileges...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Rational ClearCase (CVE-2018-12547, CVE-2018-1890)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 7 and 8, which are used by IBM Rational ClearCase. These issues were disclosed as part of the IBM Java SDK updates in March 2019. Vulnerability Details CVEID: CVE-2018-1890 DESCRIPTION: IBM SDK, Java Technology...

About the security content of iOS 12.1.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2019-11773

Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users...

CVE-2019-11773

Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users...

Code injection

Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users...

CVE-2019-11773

Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users...

CVE-2019-11773

CVE-2019-11773 affects AIX builds of Eclipse OMR prior to 0.1, where unused RPATHs may allow local code injection and privilege elevation. Root cause: unused RPATHs in the build. Impact: potential escalation by local users. Exploit details, affected versions beyond the stated range, and concrete ...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Financial Transaction Manager for ACH Services for Multi-Platform

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 or Version 8 by Financial Transaction Manager for ACH Services for Multi-Platform FTM ACH. Financial Transaction Manager for ACH Services for Multi-Platform has addressed the applicable CVEs. Vulnerability...

CVE-2019-1287

An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assistant handles objects in memory, aka 'Windows Network Connectivity Assistant Elevation of Privilege Vulnerability'...

CVE-2019-1268

An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'...

About the security content of iTunes 12.9.3 for Windows - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Google Android Video Driver Privilege Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Video driver is one of the video drivers. A privilege elevation vulnerability exists in the Video driver in Android. An attacker can exploit this vulnerability to elevate privileges...

Latest Microsoft Updates Patch 4 Critical Flaws In Windows RDP Client

Get your update caps on. Microsoft today released its monthly Patch Tuesday update for September 2019, patching a total of 79 security vulnerabilities in its software, of which 17 are rated critical, 61 as important, and one moderate in severity. Two of the security vulnerabilities patched by the...

Windows Media Elevation of Privilege Vulnerability

An elevation of privilege exists in hdAudio.sys which may lead to an out of band write. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To exploit this vulnerability, an...

Google Android MNH Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. MNH driver is one of the MNH drivers. An elevation of privilege vulnerability exists in the MNH driver in Android. An attacker can exploit this vulnerability to elevate privileges...

Google Android Kernel Elevation of Privilege Vulnerability (CNVD-2019-47018)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA in the U.S. Kernel is one of the kernel components. An elevation of privilege vulnerability exists in the Kernel component of Android. An attacker can exploit this vulnerability to elevate...