5208 matches found
CVE-2016-8534
A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found...
CVE-2018-0820
The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are...
CVE-2017-13273
In xtqtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-65853158...
CVE-2018-0756
The Windows kernel in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". This CVE is unique from...
SUSE-SU-2018:0437-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information t...
PT-2018-9101 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to how objects in memory are handled, allowing an elevation of privilege. This could potentially affect the system. Recommendations: At the moment, there is no...
Google Android NVIDIA component libnvmmlite_audio.so file elevation of privilege vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the NVIDIA libnvmmliteaudio.so file in Android. An attacker can exploit this vulnerability to execute code write across boundarie...
Improper access control
An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate...
SUPERAntiSpyware Professional Trial SASKUTIL.SYS Driver Elevation of Privilege Vulnerability
SUPERAntiSpyware Professional Trial is a suite of antivirus tools mainly used for scanning for spyware from Support.com, USA.SASKUTIL.SYS driver is one of the drivers that communicates with the hardware. A security vulnerability exists in the SASKUTIL.SYS driver in SUPERAntiSpyware Professional...
CVE-2017-1000403
Jenkins Speaks! Plugin, all current versions, allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM, effectively elevating privileges to Overall/Run Scripts...
Siemens TeleControl Server Basic Elevation of Privilege Vulnerability
Siemens TeleControl Server Basic is a remote control system for Siemens equipment from Siemens, Germany. A security vulnerability exists in Siemens TeleControl Server Basic versions prior to 3.1. An attacker could use this vulnerability to elevate privileges and perform administrative operations...
Code injection
Untrusted search path in Intel Graphics Driver 15.40.x.x, 15.45.x.x, and 21.20.x.x allows unprivileged user to elevate privileges via local access...
CVE-2017-5696
CVE-2017-5696 corresponds to an untrusted search path in Intel Graphics Driver (Windows) across 15.40.x.x, 15.45.x.x and 21.20.x.x that can let an unprivileged local user elevate privileges. The connected sources confirm this as a privilege-escalation issue via local access, caused by an untruste...
Cisco ESA and Content SMA Elevation of Privilege Vulnerabilities
Cisco Email Security Appliances ESAs are email security gateway products designed to detect and block a variety of email-borne threats, such as malware, spam, and phishing attacks.The Cisco Content Security Management Appliance SMA centralizes multiple Cisco email and network security appliances'...
Oracle VM VirtualBox Elevation of Privilege Vulnerability (CNVD-2018-02060)
Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. A security vulnerability exists in the Oracle VM VirtualBox component of Oracle Virtualization, versions...
Double free
In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer. This could lead to an local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is...
CVE-2017-13176
In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to a remote elevation of privilege that could enable bypassing user interaction requirements with no additional execution privileges needed. User interaction is needed for...
CVE-2017-13184
CVE-2017-13184 affects Android 8.0–8.1 SurfaceFlinger. In enableVSyncInjections, a use-after-free on mVSyncInjector can enable local elevation of privilege with code execution in a privileged process; no user interaction required. Exploitation details are not provided in the connected documents. ...
CVE-2017-13226
An elevation of privilege vulnerability in the MediaTek mtk. Product: Android. Versions: Android kernel. Android ID: A-32591194. References: M-ALPS03149184...
Jungo Windriver Local Elevation of Privilege Vulnerability
Jungo WinDriver is a PCI/USB device driver development tool from Jungo Connectivity, Israel. A local elevation of privilege vulnerability exists in Jungo Windriver version 12.5.1. A local attacker can exploit this vulnerability to cause a denial of service buffer overflow or gain system privilege...