Android Qualcomm Component Elevation of Privilege Vulnerability

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies that use Qualcomm components for their devices. Qualcomm is a Qualcomm...

Microsoft Kernel-Mode Drivers Multiple Privilege Elevation Vulnerabilities (3171481)

This host is missing an important security update according to Microsoft Bulletin MS16-090. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2016-04746)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel-mode drivers is one of the kernel driver management software. An elevation of privilege vulnerability exists in the kernel-mode driver in Microsoft Windows Server 2012 and Windows 10...

CVE-2016-3239: Undefined Security Weakness

The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via vectors involving filesystem write operations, aka...

MS16-090: Description of the security update for Windows kernel-mode drivers: July 12, 2016

None None...

PT-2016-2479

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to a lack of access control in Microsoft Windows kernel-mode drivers, which can be exploited by an attacker to elevate their privileges using a specially crafte...

PT-2016-2502

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a lack of access control in a Windows kernel mode driver, which can be exploited by an attacker to elevate their privileges using a specially crafted application. This...

Perl Local Elevation of Privilege Vulnerability

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall. A security vulnerability exists in Perl. A local attacker can exploit this vulnerability by supplying specially crafted data to the XSLoader component to gain privileges on the target syst...

PT-2016-2461

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.4 Android versions 5.0.x through 5.0.2 Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-07-01 Description The issue is caused by multiple buffer overflows in libdex/OptInvocation.cpp in...

PT-2016-2448

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 Description The issue is related to insufficient access control in MediaTek drivers for the Android operating system. It allows a remote attacker to elevate their privileges using a specially crafted...

PT-2016-2449

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 Description The issue is related to insufficient access control in MediaTek drivers for the Android operating system. It allows a remote attacker to elevate their privileges using a specially crafted...

PT-2016-2439

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-05 Description The issue is related to errors in the code of the Qualcomm Wi-Fi driver in the Android operating system. It allows a remote attacker to elevate their privileges using a specially crafted...

PT-2016-2467

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-01 Description The issue is related to errors in security label processing in the ChooserTarget service of the Android operating system. It allows a remote attacker to elevate their privileges using a speciall...

Vulnerabilities in the Internet Explorer browser, which allow a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities in Internet Explorer allow attackers to elevate their privileges level. By exploiting these vulnerabilities, attackers cannot execute arbitrary code, but they can use them to exploit other vulnerabilities with elevated privileges e.g., to execute arbitrary code...

Lenovo Solution Center Local Elevation of Privilege Vulnerability

Lenovo Solution Center LSC is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. A local elevation of privilege vulnerability exists in versions prior to LSC 3.3.003. A local attacker...

Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities

Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SYMANTEC-SEPM-MULTIPLE-VULNS.txt + ISR: ApparitionSec Vendor: ================ www.symantec.com Product: =========== SEPM Symantec Endpoint Protection Manager and client v12.1...

Microsoft Windows - Custom Font Disable Policy Bypass

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=779 Windows: Custom Font Disable Policy Bypass Platform: Windows 10 Only Class: Security Feature Bypass Summary: It’s possible to bypass the ProcessFontDisablePolicy check in win32...

Windows kernel mode drivers privilege elevation vulnerabilities MS16-062)

No description provided by source...

CVE-2016-3219

The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

CVE-2016-3221: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...