CVE-2017-0742

CVE-2017-0742 is an Elevation of Privilege vulnerability in the MediaTek Video driver used by Android kernel. The issue affects Android devices with MediaTek video components and could allow a local attacker to execute arbitrary code within a privileged context (EoP). Public detail across connect...

CVE-2017-8622

Windows Subsystem for Linux in Windows 10 1703 allows an elevation of privilege vulnerability when it fails to properly handle handles NT pipes, aka "Windows Subsystem for Linux Elevation of Privilege Vulnerability"...

Dashlane Local Privilege Vulnerability

Dashlane is a system security software for the mobile platform from Dashlane Inc. There is a security vulnerability in Dashlane. A local attacker can exploit this vulnerability by placing the WINHTTP.dll file in the %APPDATA%Dashlane directory...

Linux foundation ONOS Privilege Access Vulnerability

Linux foundation ONOS is an open source SDN network operating system maintained by the Linux Foundation and the ONOS community. A security vulnerability exists in Linux foundation ONOS version 1.9.0. A remote attacker can exploit the vulnerability to execute code...

Linux foundation ONOS privilege access vulnerability (CNVD-2017-19578)

Linux foundation ONOS is an open source SDN network operating system maintained by the Linux Foundation and the ONOS community. A security vulnerability exists in Linux foundation ONOS version 1.9.0. An attacker can exploit the vulnerability to use the websocket protocol without authentication...

Huawei Mate 9 Push Module Privilege Vulnerability

Huawei Mate 9 is a smartphone from Chinese company Huawei.Push module is one of the message push modules. A privilege extraction vulnerability exists in the Push module in Huawei Mate 9 version MHA-AL00AC00B125. An attacker can exploit the vulnerability by tricking a user into saving a malicious...

Privilege escalation

Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, ak...

Privilege escalation

Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, ak...

Privilege escalation

Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege...

Privilege escalation

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Kerberos falling back to NT LAN Manager NTLM Authentication...

CVE-2017-0710

CVE-2017-0710 is an elevation-of-privilege vulnerability in the Android kernel (Upstream Linux tcb/KernelTCB). The CNVD entry describes a privilege-lifting issue in KernelTCB in Android where an attacker could bypass privilege validation and access arbitrary ptrace, enabling local privilege escal...

CVE-2017-8579

CVE-2017-8579 describes a kernel-mode privilege escalation via the DirectX component in Windows 10 (Gold/1511, 1607, 1703) and Windows Server 2016. An authenticated, local attacker can run arbitrary code in kernel mode through a specially crafted DirectX application. The impact is full system com...

Ocaml Privilege Vulnerability

OCaml is a general-purpose programming language. Ocaml is vulnerable to a power lifting vulnerability. The vulnerability stems from setting the CAMLCPLUGINS, CAMLNATIVECPLUGINS, or CAMLBYTECPLUGINS environment variable in a binary file labeled setuid, which can be exploited by an attacker to...

Oracle Solaris Local Elevation of Privilege Vulnerability

Solaris was originally a Unix-like operating system developed by Sun Microsystems and became known as Oracle Solaris after Sun was acquired by Oracle. A local elevation of privilege vulnerability exists in Oracle Solaris, which can be exploited by a local attacker to gain root privileges on an...

CVE-2017-0298

A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, when configured to run as the interactive user, allows an authenticated attacker ...

CVE-2017-0298

Technical details about CVE-2017-0298 are not publicly provided in the supplied documents. No specific affected products/versions or root cause are described here. Monitor official sources for updates.

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2017-13006)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local elevation of privilege vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to run processes with elevated privileges...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2017-10777)

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the United States. lnk files are a type of file used to point to other files. A local elevation of privilege vulnerability exists in Microsoft Windows. A local attacker can exploit the vulnerability to execute...

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Platinum APT First to Abuse Intel Chip Management Feature

Advanced attackers operating in Southeast Asia are abusing a feature in Intel chips to quietly load malware and exploits onto compromised machines. Microsoft on Thursday published its latest research into a group it calls Platinum, which is keen on using previously untapped resources to stealthil...