MS13-052: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: July 9, 2013

MS13-052: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: July 9, 2013 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege on a...

MS14-072: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 11, 2014

MS14-072: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 11, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege...

MS14-072: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: November 11, 2014

MS14-072: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: November 11, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that cou...

MS15-101: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: September 8, 2015

MS15-101: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: September 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework that could all...

MS15-004: Description of the security update for Windows 7 and Windows Server 2008 R2 if the Remote Desktop Connection 8.0 client update is installed: January 13, 2015

MS15-004: Description of the security update for Windows 7 and Windows Server 2008 R2 if the Remote Desktop Connection 8.0 client update is installed: January 13, 2015 Summary This security update resolves a privately reported vulnerability in the TS WebProxy component in Windows 7 and Windows...

Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: December 10, 2013

Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: December 10, 2013 September 9, 2014 This security update has been re-released and contains updated files. We recommend that you apply this updated security update. View...

MS15-118: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 10, 2015

MS15-118: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 10, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. The most severe of these vulnerabilities could...

MS15-101: Description of the security update for the .NET Framework 4 on Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: September 8, 2015

MS15-101: Description of the security update for the .NET Framework 4 on Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: September 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework that could...

Google Android NVIDIA GPU Driver Privilege Elevation Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android NVIDIA GPU Driver, which can be exploited by an attacker to execute arbitrary code with elevated privileges in...

e107 CMS is less than or equal to 2. 1. 2 elevation of privilege vulnerability analysis-vulnerability warning-the black bar safety net

0x00 vulnerability background e107 CMS is a based on PHP, Bootstrap, Mysql, web site content management system, can be widely used for personal blogs, enterprise built station, in the global range more widely. 0x01 vulnerability affects version version 0x02 vulnerability analysis of the environme...

CVE-2016-8425

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

USN-3146-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry

USN-3146-2: Linux kernel Xenial HWE vulnerabilities Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 LTS Description It was discovered that the getuserasmex implementation in the Linux kernel for x86/x8664 contained extended asm statements that were incompatible with the...

Huawei畅享5手机MTK平台存在输入校验漏洞(CNVD-2016-12841)

Huawei Think 5 is a smartphone from the Chinese company Huawei Huawei. An input validation vulnerability exists in the MTK platform of the Huawei Changsha 5 phone. An attacker may trick the user into installing a malicious application, which can exploit the vulnerability to send specific paramete...

CVE-2016-7292: Undefined Security Weakness

The Installer in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 mishandles library loading, which allows local users to gain privileges via a...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:3188-1)

The SUSE Linux Enterprise 12 SP 2 kernel was updated to fix two security issues. The following security bugs were fixed : - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. -...

Xen elevation of privilege vulnerability (CNVD-2016-12848)

Xen is an open source virtual machine monitor product developed by the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from an elevation of...

Huawei cellular Wi-Fi driver suffers from input checksum vulnerability

Huawei Think 5 is a smartphone from the Chinese company Huawei Huawei. An input validation vulnerability exists in the Huawei Think 5 cellular Wi-Fi driver. An attacker could trick users into installing a malicious application, which could exploit the vulnerability to send specific parameters to...

Flaws in Kerberos PAC validation can trigger privilege elevation.

Description The winbindd part of Samba offers verification and unpacking of the PAC Privilege Attribute Certificate received via Kerberos. When parsing the PAC, winbindd may write beyond the allocated buffer, however the data involved is from the server private key and so not user-controlled...

PT-2016-3338

Name of the Vulnerable Software and Affected Versions Samba versions 4.0.0 through 4.5.2 Description The issue is related to the incorrect handling of the PAC Privilege Attribute Certificate checksum in the implementation of the Kerberos protocol in Samba. This can be exploited by a remote,...

CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...