Google Android Ashmem Group Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Ashmem is a memory allocation sharing component. An elevation of privilege vulnerability exists in the Ashmem component in Android. A remote attacker could exploit this...

Microsoft Windows Subsystem for Linux Elevation of Privilege Vulnerability (CNVD-2018-00519)

Microsoft Windows 10 and Windows Server Version 1709 are both products of Microsoft Corporation.Microsoft Windows 10 is a cross-platform operating system for PCs and laptops, tablets, and cell phones.Windows Server Version 1709 is a server operating system. Microsoft Windows 10 is a cross-platfor...

CVE-2018-0788

The Windows Adobe Type Manager Font Driver Atmfd.dll in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 and R2 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "OpenType Font Driver Elevation of...

CVE-2018-0748

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way memory...

HPESBHF03805 rev.24 - Certain HPE products using Microprocessors from Intel, AMD, and ARM, with Speculative Execution, Elevation of Privilege and Information Disclosure (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754)

Potential Security Impact: Local: Disclosure of Information, Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL120 Gen10 Server - prior to 1.3202-01-201816 Feb 2018 HPE ProLiant DL160 Gen10 Server - prior to 1.3202-01-201816 Feb 2018 HPE ProLian...

Vulnerability of the JavaScript ChakraCore kernel, Microsoft Edge and Internet Explorer browsers, caused by operations beyond buffer boundaries in memory, allowing attackers to gain control of the current user’s privileges and execute arbitrary code.

The vulnerability of JavaScript ChakraCore, as well as Microsoft Edge and Internet Explorer browsers, is caused by an operation that goes beyond the buffer boundaries in memory a memory object handling error. Exploiting this vulnerability can allow a remote attacker to gain administrative...

Auth0 passport-wsfed-saml2 elevation of privilege vulnerability

Auth0 passport-wsfed-saml2 library is a set of Auth0 development platform of the United States Auth0 company's tool library . A security vulnerability exists in Auth0 passport-wsfed-saml2 library versions prior to 3.0.5. An attacker can exploit the vulnerability to spoof other users and potential...

Ubiquiti UniFi Video Local Elevation of Privilege Vulnerability

Ubiquiti UniFi Video is a webcam product from Ubiquiti Networks, USA. A local elevation of privilege vulnerability exists in Ubiquiti UniFi Video. A local attacker can exploit this vulnerability to execute arbitrary code with elevated privileges...

Cambium Networks cnPilot Backdoor Access Elevation of Privilege Vulnerability

Cambium Networks cnPilot is a cloud-enabled managed single-band router product from Cambium Networks, USA. A security vulnerability exists in Cambium Networks cnPilot using firmware version 4.3.2-R4 and earlier. An attacker can exploit the vulnerability by accessing the web shell using the...

CVE-2017-14380

In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin compadmin account user could exploit a vulnerability in isigetitrace or isigetprofile maintenance scripts to run any shell script as system root on a cluster in...

CVE-2017-14380

In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin compadmin account user could exploit a vulnerability in isigetitrace or isigetprofile maintenance scripts to run any shell script as system root on a cluster in...

Type confusion

Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access...

Perspective ICM Investigation Elevation of Privilege Vulnerability

Resolver Perspective ICM Investigation&Case is a suite of risk management software from Resolver Canada. A privilege extraction vulnerability exists in Resolver Perspective ICM Investigation&Case version 5.1.1.16. A remote attacker can exploit this vulnerability to change access rights and thereb...

ISPConfig Elevation of Privilege Vulnerability

ISPConfig is an open source web hosting management program for Linux with a Web control panel , you can use the Web control panel to manage web hosting , open a website , open a mailbox , open and manage mysql databases , support for DNS resolution and monitor the server's operating conditions an...

CVE-2017-13168

An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233...

CVE-2017-13172

An elevation of privilege vulnerability in the MediaTek bluetooth driver. Product: Android. Versions: Android kernel. Android ID A-36493287. References: M-ALPS03495791...

CVE-2017-0837

An elevation of privilege vulnerability in the Android media framework libaudiopolicymanager. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64340921...

UBUNTU-CVE-2017-13162

An elevation of privilege vulnerability in the kernel binder. Product: Android. Versions: Android kernel. Android ID A-64216036...

CVE-2017-13167

An elevation of privilege vulnerability in the kernel sound timer. Product: Android. Versions: Android kernel. Android ID A-37240993...

Google Android Kernel File System Elevation of Privilege Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, of which the Kernel File system is a component. Kernel File system is one of the kernel file system components. The Kernel...