About the security content of macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

The vulnerability of Siemens Sinumerik programmable logic controllers lies in errors in control of resolution settings, which allows a intruder to exploit a privileged command to gain enhanced privileges.

The vulnerability of Siemens Sinumerik programmable logic controllers is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to use a privileged application command to elevate user privileges, but not to the level of root...

About the security content of iOS 12.1.3

About the security content of iOS 12.1.3 This document describes the security content of iOS 12.1.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Huawei PCManager Elevation of Privilege Vulnerability

Huawei PCManager is a set of computer management software from Huawei, China. An elevation of privilege vulnerability exists in Huawei PCManager. An attacker can exploit this vulnerability by tricking a user into installing and running a malicious application. An attacker who successfully exploit...

Microsoft Windows 10 - DSSVC CanonicalAndValidateFilePath Security Feature Bypass

Microsoft Windows 10 - DSSVC CanonicalAndValidateFilePath Security Feature Bypass Windows: DSSVC CanonicalAndValidateFilePath Security Feature Bypass Platform: Windows 10 1803 and 1809. Class: Security Feature Bypass/Elevation of Privilege Security Boundary per Windows Security Service Criteria:...

Microsoft Windows 10 - DSSVC CanonicalAndValidateFilePath Security Feature Bypass

Windows: DSSVC CanonicalAndValidateFilePath Security Feature Bypass Platform: Windows 10 1803 and 1809. Class: Security Feature Bypass/Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary NOTE: This is one of multiple issues I’m reporting in the same...

KioWare Server Elevation of Privilege Vulnerability

KioWare is a suite of self-service terminal browser software. The software has the ability to restrict end-user access to specific interfaces. A security vulnerability exists in KioWare Server 4.9.6 and prior versions. An attacker can exploit this vulnerability by replacing the KWSService service...

SAP Enterprise Financial Services Remote Authorization Bypass Vulnerability

SAP Enterprise Financial Services is a set of enterprise financial services solutions from SAP. A remote authorization bypass vulnerability exists in SAP Enterprise Financial Services, which can be exploited by a remote attacker to elevate privileges due to a program's failure to perform required...

CVE-2019-0570

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1...

CVE-2019-0572

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is...

CVE-2019-0571

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is...

CVE-2019-0571

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is...

Microsoft Edge Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object. An attacker who successfully exploited the vulnerability could use the Browser Broker COM object to elevate privileges on an affected system. This vulnerability by itself does not allow arbitrary code...

PT-2019-1167 · Microsoft · Skype

Name of the Vulnerable Software and Affected Versions: Skype versions 8.35 Description: The issue is related to errors in handling specific authentication requests, which can allow an attacker to bypass screen lock and access protected information. This is an elevation of privilege issue that...

The vulnerability of NVIDIA GeForce Experience’s software, caused by insecure management of privileges, allows a hacker to elevate their own privileges.

The vulnerability of NVIDIA GeForce Experience software is due to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Security Bulletin: Multiple Security Vulnerabilities Affect IBM WebSphere Application Server in IBM Cloud

Summary There is a potential cross-site scripting vulnerability with the Installation Verification Tool of IBM WebSphere Application Server. There is a potential cross-site scripting vulnerability in the Cache Monitor web application in WebSphere Application Server. There is a potential code...

Intel System Defense Utility Elevation of Privilege Vulnerability

Intel System Defense Utility is a tool from Intel Corporation USA for remotely configuring the security of PCs supporting Intel vPro technology. The product is mainly used for security configuration of Intel vPro features and SMB environments. An elevation of privilege vulnerability exists in the...

Multiple Siemens Product Privilege Access Control Vulnerabilities

Siemens SINUMERIK 808D and so on are the German Siemens Siemens company's CNC machine tool system controller. A privilege access control vulnerability exists in Siemens SINUMERIK CNC Controller. A local attacker could exploit this vulnerability to elevate privileges...

Google Android L2TP Component Privilege Permission and Access Control Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which L2TP is an L2TP Internet Tunneling Protocol component. A boost vulnerability exists in the L2TP component in Android. A local attacker can exploit this vulnerability to...

Google Android Easel Component Permission License and Access Control Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Easel is a component. An elevation vulnerability exists in the Easel component of Android. A local attacker can exploit this vulnerability to elevate privileges write out...