CVE-2016-7188

The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...

CVE-2016-0075

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of...

CVE-2016-7185

CVE-2016-7185 is a Windows kernel‑mode driver elevation of privilege vulnerability (Win32k) affecting multiple Windows versions (Vista to Windows 10 1607). Root cause: improper handling of objects in memory by kernel‑mode drivers, enabling local users to execute code with HIGH/Kernel privileges v...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-07746)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows 10 Gold, 1511 and 1607 versions. A local attacker can exploit the vulnerability to execute arbitrary code with system administrator...

CVE-2016-3348

CVE-2016-3348 is a local elevation-of-privilege vulnerability in the Windows kernel-mode driver Win32k.sys. The root cause is how the kernel-mode driver handles objects in memory, which an attacker can exploit by running a crafted application after logging in to gain kernel-level privileges. Affe...

CVE-2016-3349

The kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

SAP SAPCAR Local Privilege Vulnerability

SAP SAPCAR is a set of compression and decompression tools for use in SAP Kernel. A security vulnerability exists in SAP SAPCAR that allows a local attacker to exploit the vulnerability to elevate privileges...

Android on Nexus Qualcomm Component Privilege Acquisition Vulnerability (CNVD-2016-06233)

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...

Android Qualcomm GPU Driver Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm GPU Driver is a graphics processor driver developed by Qualcomm. A power lifting vulnerability exists in the Qualcomm GPU Driver used in Android. The vulnerability can be...

Google Nexus elevation of privilege vulnerability (CNVD-2016-06075)

Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code using kernel wide elevated privileges...

Foreman API and UI Privilege Vulnerability

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A privilege-lifting vulnerability exists in the Foreman API and UI. When a restricted user from a specif...

IBM TRIRIGA Application Platform Privilege Vulnerability

IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. A privilege extraction vulnerability exists in IBM TRIRIGA Application Platform, which can be exploited by an attacker to gain privileges...

Drupal Privilege Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. Drupal has an elevation of privilege vulnerability that allows remote attackers to exploit the vulnerability to elevate privileges...

CVE-2016-3239

The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via vectors involving filesystem write operations, aka...

CVE-2016-3286

CVE-2016-3286 affects Windows kernel-mode drivers (Win32k) across multiple OS versions (Vista through Windows 10 1511). The vulnerability arises in the Windows kernel-mode driver due to improper handling of memory objects, enabling a local attacker to gain elevated privileges via a crafted applic...

CVE-2016-3250

CVE-2016-3250 is a Windows kernel-mode elevation-of-privilege vulnerability in Win32k. The issue affects kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 (Gold/1511), where a crafted application could cause memory-object handling flaws to escalate privileges locally. The NVD en...

IBM Security Identity Manager Privilege Gain Vulnerability

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password...

Android MediaTek Power Driver Privilege Vulnerability

Android on Android One is an open source Linux-based operating system for Android One smartphone developed by Google and the Open Handheld Alliance OHA, in which the MediaTek power driver is a MediaTek-developed power driver module. MediaTek power driver is a power driver module developed by...

Android Qualcomm Wi-Fi Driver Privilege Vulnerability

Android on Nexus 5X is an open source Linux-based operating system for the Nexus 5X smartphone developed by Google and the Open Handset Alliance OHA, for which Qualcomm Wi-Fi driver is a Qualcomm-developed Wi-Fi driver component. Qualcomm Wi-Fi driver is a Qualcomm-developed Wi-Fi driver componen...

IBM TRIRIGA Applications Privilege Vulnerability

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...