Security Advisory - Two Security Vulnerabilities in Huawei EMUI

Huawei EMUI3.1 has two vulnerabilities. The Keyguard application in Huawei EMUI3.1 has a privilege elevation vulnerability due to insufficient validation on specific parameters. An attacker may trick a user into installing a malicious application. Successful exploit could allow the attacker to...

Linux Kernel Elevation of Privilege Vulnerability (CNVD-2017-01069)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. An elevation of privilege vulnerability exists in the Linux Kernel. An attacker can exploit this vulnerability to obtain elevated privileges and perform unauthorized operation...

[SECURITY] [DLA 795-1] hesiod security update

Package : hesiod Version : 3.0.2-21+deb7u1 CVE IDs : CVE-2016-10151 CVE-2016-10152 Debian Bugs : 852094, 852093 It was discovered that there were two vulnerabilities in hesiod, Project Athenas DNS-based directory service: CVE-2016-10151: A weak SUID check allowing privilege elevation...

Lenovo XClarity Administrator Elevation of Privilege Vulnerability

Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The solution supports simplified infrastructure management, faster server response, and improved performance of Lenovo server systems. An elevation of privilege vulnerability exists in Lenovo...

CVE-2017-0403

An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0383

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2016-8458

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-8456

CVE-2016-8456 describes an elevation of privilege vulnerability in the Broadcom Wi‑Fi driver used by Android on devices such as Nexus/Pixel families. The issue allows a local malicious application to execute arbitrary code in the kernel context, and it is rated High because an attacker must first...

CVE-2016-6771

An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 6.0, 6.0.1, 7.0...

CVE-2016-6778

An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-6779

An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-6758

An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not...

Google Nexus NVIDIA GPU driver elevation of privilege vulnerability (CNVD-2017-00473)

Android on Nexus 9 is a Linux-based open source operating system for the Nexus 9 tablet developed by Google and the Open Handset Alliance OHA, and the NVIDIA camera driver is one of the camera drivers used in it. An elevation of privilege vulnerability exists in the NVIDIA GPU driver on Google...

Google Nexus NVIDIA GPU driver elevation of privilege vulnerability (CNVD-2017-00470)

Android on Nexus 9 is a Linux-based open source operating system for the Nexus 9 tablet developed by Google and the Open Handset Alliance OHA, and the NVIDIA camera driver is one of the camera drivers used in it. An elevation of privilege vulnerability exists in the NVIDIA GPU driver on Google...

Google Android Audioserver elevation of privilege vulnerability (CNVD-2017-00576)

Google Android is an operating system developed by Google for smartphones. Google Android Audioserver has a security vulnerability that allows remote attackers to exploit the vulnerability through a specially crafted application that can elevate privileges...

Microsoft Edge Privilege Elevation Vulnerability (3214288)

This host is missing an important security update according to Microsoft Bulletin MS17-001. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Android Synaptics Touchscreen Driver Privilege Elevation Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Synaptics touchscreen Driver is one. An elevation of privilege vulnerability exists in the Synaptics touchscreen driver in versions of Android prior to 7.0. An attacker c...

MS14-072: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 11, 2014

MS14-072: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 11, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege...

MS14-072: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: November 11, 2014

MS14-072: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: November 11, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that cou...

MS15-004: Description of the security update for Windows 7 and Windows Server 2008 R2 if the Remote Desktop Connection 8.0 client update is installed: January 13, 2015

MS15-004: Description of the security update for Windows 7 and Windows Server 2008 R2 if the Remote Desktop Connection 8.0 client update is installed: January 13, 2015 Summary This security update resolves a privately reported vulnerability in the TS WebProxy component in Windows 7 and Windows...