CVE-2019-11773

Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users...

CVE-2019-11773

CVE-2019-11773 affects AIX builds of Eclipse OMR prior to 0.1, where unused RPATHs may allow local code injection and privilege elevation. Root cause: unused RPATHs in the build. Impact: potential escalation by local users. Exploit details, affected versions beyond the stated range, and concrete ...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Financial Transaction Manager for ACH Services for Multi-Platform

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 or Version 8 by Financial Transaction Manager for ACH Services for Multi-Platform FTM ACH. Financial Transaction Manager for ACH Services for Multi-Platform has addressed the applicable CVEs. Vulnerability...

CVE-2019-1287

An elevation of privilege vulnerability exists in the way that the Windows Network Connectivity Assistant handles objects in memory, aka 'Windows Network Connectivity Assistant Elevation of Privilege Vulnerability'...

CVE-2019-1268

An elevation of privilege exists when Winlogon does not properly handle file path information, aka 'Winlogon Elevation of Privilege Vulnerability'...

About the security content of iTunes 12.9.3 for Windows - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

Google Android Video Driver Privilege Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Video driver is one of the video drivers. A privilege elevation vulnerability exists in the Video driver in Android. An attacker can exploit this vulnerability to elevate privileges...

Latest Microsoft Updates Patch 4 Critical Flaws In Windows RDP Client

Get your update caps on. Microsoft today released its monthly Patch Tuesday update for September 2019, patching a total of 79 security vulnerabilities in its software, of which 17 are rated critical, 61 as important, and one moderate in severity. Two of the security vulnerabilities patched by the...

Windows Media Elevation of Privilege Vulnerability

An elevation of privilege exists in hdAudio.sys which may lead to an out of band write. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To exploit this vulnerability, an...

Google Android Kernel Elevation of Privilege Vulnerability (CNVD-2019-47018)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA in the U.S. Kernel is one of the kernel components. An elevation of privilege vulnerability exists in the Kernel component of Android. An attacker can exploit this vulnerability to elevate...

PT-2019-3296 · Microsoft · Windows Appx Deployment Server +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Server affected versions not specified Description: The issue is related to errors in connection handling within the Windows AppX Deployment Server component of Windows operating systems. It allows an attacker to...

Google Android MNH Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. MNH driver is one of the MNH drivers. An elevation of privilege vulnerability exists in the MNH driver in Android. An attacker can exploit this vulnerability to elevate privileges...

ASUS Asus Precision TouchPad Privilege Permission and Access Control Issues Vulnerability

ASUS Asus Precision TouchPad is a touchpad driver from Asus Taiwan, China. A security vulnerability exists in ASUS Asus Precision TouchPad version 11.0.0.25. The vulnerability can be exploited by an attacker to cause a denial of service and elevation of privilege...

Google Android System Buffer Overflow Vulnerability (CNVD-2019-39715)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Bluetooth in Android version 10. An attacker can exploit the vulnerability to elevate privileges...

Google Android System Elevation of Privilege Vulnerability (CNVD-2019-39720)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in telephony in Android version 10, which stems from the program's lack of boundary checking. An attacker could exploit the vulnerability to elevate privileges...

Google Android power lifting vulnerability (CNVD-2019-37968)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. Google Android suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to elevate privileges...

Microsoft Windows power lifting vulnerability (CNVD-2019-31062)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the way the wcmsvc.dll file handles memo...

Intel Driver & Support Assistant Elevation of Privilege Vulnerability

Intel Driver & Support Assistant is an Intel driver and support management tool from Intel Corporation USA. This tool is mainly used to get the latest applications provided by Intel. A security vulnerability exists in Intel Driver & Support Assistant versions prior to 19.7.30.2, which stems from...

CVE-2019-1159

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

CVE-2019-1168

An elevation of privilege exists in the p2pimsvc service where an attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially...