CVE-2017-13210

In CameraDeviceClient::submitRequestList of CameraDeviceClient.cpp, there is an out-of-bounds write if metadataSize is too small. This could lead to a local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is n...

PT-2018-5490

Name of the Vulnerable Software and Affected Versions: Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to improper input validation of the host field in the parseURL function of URLStreamHandler. This could lead to a remote elevation of privilege,...

PT-2018-5510

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an out-of-bounds write in the ashmem ioctl function of ashmem.c. This is due to insufficient locking when accessing asma, which could lead to a local elevation of privilege. This enables cod...

Jungo Windriver Local Elevation of Privilege Vulnerability

Jungo WinDriver is a PCI/USB device driver development tool from Jungo Connectivity, Israel. A local elevation of privilege vulnerability exists in Jungo Windriver version 12.5.1. A local attacker can exploit this vulnerability to cause a denial of service buffer overflow or gain system privilege...

PT-2018-5492

Name of the Vulnerable Software and Affected Versions: Android versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to a possible double free in the doGetThumb and getThumbnail functions of MtpServer. This could lead to a local elevation of privilege, enabling code execution as ...

PT-2018-5505

Name of the Vulnerable Software and Affected Versions: Android versions 8.0, 8.1 Description: The issue is related to an insecure permissions check in the ServiceManager::add function within the hardware service manager. This could allow an application or service to replace a HAL service with its...

PT-2018-5511

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an out-of-bounds write in the bootloader due to reading a string without verifying that it's null-terminated. This could lead to a secure boot bypass and a local elevation of privilege,...

PT-2018-5495

Name of the Vulnerable Software and Affected Versions: Android versions 8.0, 8.1 Description: The issue is related to a possible use after free of mVSyncInjector in the enableVSyncInjections function of SurfaceFlinger. This could lead to a local elevation of privilege, enabling code execution as ...

PT-2018-5137

Name of the Vulnerable Software and Affected Versions NVIDIA driver affected versions not specified Description The NVIDIA driver contains an integer overflow issue that could lead to a use after free, potentially resulting in elevation of privilege, enabling code execution as a privileged proces...

PT-2018-5491

Name of the Vulnerable Software and Affected Versions: Android versions 6.0 through 8.1 Description: The issue is related to a possible out-of-bounds write due to a use after free in the onQueueFilled function of SoftAVCDec. This could occur if a bad header causes the decoder to get caught in a...

Google Android Ashmem Group Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Ashmem is a memory allocation sharing component. An elevation of privilege vulnerability exists in the Ashmem component in Android. A remote attacker could exploit this...

Microsoft Windows Subsystem for Linux Elevation of Privilege Vulnerability (CNVD-2018-00519)

Microsoft Windows 10 and Windows Server Version 1709 are both products of Microsoft Corporation.Microsoft Windows 10 is a cross-platform operating system for PCs and laptops, tablets, and cell phones.Windows Server Version 1709 is a server operating system. Microsoft Windows 10 is a cross-platfor...

CVE-2018-0788

The Windows Adobe Type Manager Font Driver Atmfd.dll in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 and R2 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "OpenType Font Driver Elevation of...

CVE-2018-0748

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way memory...

HPESBHF03805 rev.24 - Certain HPE products using Microprocessors from Intel, AMD, and ARM, with Speculative Execution, Elevation of Privilege and Information Disclosure (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754)

Potential Security Impact: Local: Disclosure of Information, Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL120 Gen10 Server - prior to 1.3202-01-201816 Feb 2018 HPE ProLiant DL160 Gen10 Server - prior to 1.3202-01-201816 Feb 2018 HPE ProLian...

PT-2018-9051

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Description The issue is related to the way the Windows Kernel API enforces permissions, allowing an elevation of privilege. This could potentially allow attackers to affect the system. Recommendatio...

PT-2018-9069

Name of the Vulnerable Software and Affected Versions: Windows 7 SP1 Windows 8.1 Windows RT 8.1 Windows Server 2008 SP2 Windows Server 2008 R2 SP1 Windows Server 2012 Windows Server 2012 R2 Description: The issue is related to the way objects are handled in memory by the Windows Adobe Type Manage...

PT-2018-1117

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is caused by a heap buffer overflow in the libMtkOmxVdec.so component. This could lead to a remote elevation of privilege, enabling code execution as a privileged process with no additional execution...

CVE-2017-16897: Authentication Bypass by Spoofing

A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign the full SAML response e.g., only signs th...

Vulnerability of the JavaScript ChakraCore kernel, Microsoft Edge and Internet Explorer browsers, caused by operations beyond buffer boundaries in memory, allowing attackers to gain control of the current user’s privileges and execute arbitrary code.

The vulnerability of JavaScript ChakraCore, as well as Microsoft Edge and Internet Explorer browsers, is caused by an operation that goes beyond the buffer boundaries in memory a memory object handling error. Exploiting this vulnerability can allow a remote attacker to gain administrative...