CVE-2017-8642

CVE-2017-8642 is an elevation-of-privilege issue in Microsoft Edge on Windows 10 (1703) caused by improper JavaScript validation, enabling privilege escalation. The CNVD entry confirms the flaw and impact but does not provide a patch/version to fix. Other connected records reference the same Edge...

KB4034658: Windows 10 Version 1607 and Windows Server 2016 August 2017 Cumulative Update

The remote Windows host is missing security update 4034658. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when Microsoft Windows improperly handles NetBIOS packets. An attacker who successfully exploited this vulnerability could cause a target...

PT-2017-3398

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.0 Description The issue is related to an elevation of privilege vulnerability in the Android system's Bluetooth component, which is associated with inadequate access control. This could allow an attacker to execu...

KLA11846 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...

Linux Kernel 'btrfs/ctree.c' Local Elevation of Privilege Vulnerability

Linux Kernel is an open source operating system. A local elevation of privilege vulnerability exists in Linux Kernel 'btrfs/ctree.c', which can be exploited by an attacker to gain elevation of privilege...

CVE-2017-1468: Undefined Security Weakness

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467...

chromium-browser: out-of-bounds write in ppapi

Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page...

PT-2017-16299

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Description The issue is related to insufficient validation of untrusted input in PPAPI Plugins, which could allow a remote attacker to potentially gain privilege elevation. This can be achieved via...

CVE-2017-5099

Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page...

PT-2017-17287

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions 10.0 through 10.1.0-204 Cisco Web Security Appliance WSA version 10.1.0-204 Description A vulnerability in the web interface of the Cisco Web Security Appliance could allow an authenticated, remote...

CVE-2017-9811

The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 version 8.0.4.312. By abusing the quarantine read and write operations, it is possible to elevate the privileges to root...

CVE-2017-10603: XML Injection (aka Blind XPath Injection)

An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbitrary commands as the root user. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 15.1X53 prior to 15.1X53-D47, 15....

PT-2017-11400

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X53-D47 Junos OS versions 15.1 prior to 15.1R3 Description An XML injection issue in the Junos OS CLI allows a locally authenticated user to elevate privileges and execute arbitrary commands as the root user. Thi...

PT-2017-3021

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.0 Description The issue is related to insufficient access control in the Android framework component GateKeeperResponse, allowing a remote attacker to potentially elevate their privileges. Recommendations For...

PT-2017-2847

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to insufficient access control in the libmediaplayerservice library of the Android Media Framework. It allows a remote attacker to elevat...

McAfee Advanced Threat Defense Elevation of Privilege Vulnerability

McAfee Advanced Threat Defense ATD is a suite of threat detection and defense solutions from the U.S.-based company McAfee McAfee. The solution provides malware analysis, shared threat intelligence, and isolation of compromised systems. The Web interface in McAfee ATD is vulnerable to a power...

PT-2017-2864

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description The issue is related to insufficient access control in the windowmanager library of the Android framework. It allows a remote attacker to elevate their privileges...

Microsoft Windows Kernel Local Elevation of Privilege Vulnerability (CNVD-2017-22654)

Microsoft Windows is the popular computer operating system. A security vulnerability in the Microsoft Windows kernel's handling of memory objects allows an attacker to exploit the vulnerability to submit special requests and elevate privileges...

CVE-2017-8563

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Kerberos falling back to NT LAN Manager NTLM Authentication...

CVE-2017-8569

Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...