PT-2017-2420

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP SP3 Microsoft Windows XP x64 XP2 Microsoft Windows Server 2003 SP2 Microsoft Windows Vista Microsoft Windows 7 SP1 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 8 Description The issue is related to a...

PT-2017-3640

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an elevation of privilege vulnerability in Qualcomm closed source components, which can be exploited to allow an attacker to elevate their privileges and execute arbitrary code. This is due ...

Google Android Qualcomm Shared Memory Driver Elevation of Privilege Vulnerability

Google Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, and the Qualcomm Shared Memory Driver is a Qualcomm-developed shared memory driver that is used in the... The Qualcomm Shared Memory Driver is a Qualcomm-developed shared memory...

IBM Distributed Marketing, Marketing Platform and Marketing Operations Remote Elevation of Privilege Vulnerability

IBM Distributed Marketing, Marketing Platform and Marketing Operations are all products of IBM Corporation in the U.S. IBM Distributed Marketing is a suite of omni-channel marketing solutions.IBM Marketing Platform IBM Distributed Marketing is an omni-channel marketing solution. IBM Marketing...

Apple macOS Sierra Intel Image Driver Elevation of Privilege Vulnerability

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. An elevation of privilege vulnerability exists in the Apple macOS Sierra Intel Image Driver, which can be exploited by remote attackers to build malicious applications with elevated privileges...

EMC Isilon OneFS Remote Elevation of Privilege Vulnerability

EMC Isilon OneFS is a distributed file system that supports EMC Isilon Horizontally Scalable Storage System from EMC Corporation. The system combines the three layers of a traditional storage architecture file system, volume manager and data protection into a single unified software layer to crea...

PT-2017-2771

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description The issue is related to insufficient access control in the Android media framework, specifically in libstagefright. This can allow a remote attacker to elevate the...

PT-2017-2131

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to incorrect verification of cryptographic signatures in PKCS1 mode. This could allow a remote attacker to elevate their privileges...

PT-2017-2121

Name of the Vulnerable Software and Affected Versions Qualcomm Secure Execution Environment versions affected versions not specified Description The issue is related to errors in number processing within the TrustZone technology, specifically in the DRM subroutine of the Qualcomm Secure Execution...

Fedora 25 : xen (2017-5ae70ac6a5)

xen: various flaws 1447345 x86: 64bit PV guest breakout via pagetable use-after-mode-change XSA-213 grant transfer allows PV guest to elevate privileges XSA-214 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable...

CVE-2017-0596

An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are n...

CVE-2017-0465

An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-10277

An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing...

CVE-2016-10288

An elevation of privilege vulnerability in the Qualcomm LED driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.1...

CVE-2017-0593

CVE-2017-0593 is an elevation of privilege vulnerability in Android Framework APIs that could allow a local malicious application to obtain access to custom permissions. Affected products/versions identified in the connected documents include Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID:...

CVE-2017-0244

The kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows locally authenticated attackers to gain privileges via a crafted application, or in Windows 7 for x64-based systems, cause denial of service, aka "Windows Kernel Elevation of Privilege Vulnerability."...

CVE-2017-0212

Windows Hyper-V allows an elevation of privilege vulnerability when Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 fail to properly validate vSMB packet data, aka "Windows Hyper-V vSMB Elevation of Privilege Vulnerability"...

CVE-2017-0213

CVE-2017-0213 is a Windows privilege-escalation flaw in the COM Aggregate Marshaler that can be triggered by a specially crafted application to gain elevated privileges locally. Public documentation confirms affected OS ranges including Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, ...

CVE-2017-0213

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a speciall...

GetSimple CMS Elevation of Privilege Vulnerability

GetSimple is a content management system. An elevation of privilege vulnerability exists in admin/inc/templatefunctions.php in GetSimple CMS, which can be exploited by an attacker to elevate privileges to an arbitrary user or conduct a CSRF attack by counting session cookies or CSRF nonce...