WebKitGTK+ IPC Connection Buffer Overflow

The vulnerability of the IPC::Connection::processMessage function in UNIX IPC kernel and WebKitGTK+ web pages is caused by improper checking of message sizes. Exploiting this vulnerability can allow a malicious actor to trigger buffer overflows in user interface processes remotely...

Microsoft Windows Kernel API Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. The Kernel API is one of the kernel APIs. An elevation of privilege vulnerability exists in the Kernel API in Microsoft Windows. An attacker can exploit this vulnerability by impersonating a process...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2018-00516)

Microsoft Windows 7 SP1 and others are products of Microsoft Corporation in the United States. Microsoft Windows 7 SP1 is an operating system for personal computers; Windows Server 2008 SP2 is a server operating system. kernel is a kernel used in it. An elevation of privilege vulnerability exists...

chromium-browser: pointer information disclosure in ipc call

Incorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to leak the value of a pointer via a crafted HTML page...

Kaspersky Internet Security for Android Access Control

The vulnerability of Kaspersky Internet Security for Android relates to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the functions of this product through the Android inter-process communication...

CVE-2017-12816

In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC...

iOS Security Testing Framework: needle

iOS Security Testing Framework Needle is an open source, modular framework to streamline the process of conducting security assessments of iOS apps. Assessing the security of an iOS application typically requires a plethora of tools, each developed for a specific need and all with different modes...

UBUNTU-CVE-2017-7875

In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer overflow leads to a buffer overflow and/or a double free...

needle - The iOS Security Testing Framework

Needle is an open source, modular framework to streamline the process of conducting security assessments of iOS apps. Description Assessing the security of an iOS application typically requires a plethora of tools, each developed for a specific need and all with different modes of operation and...

CVE-2016-7549

Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote attackers to cause a denial of service invalid pointer dereference and application crash or possibly have unspecified other impact by leveragi...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2016-07613)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. An elevation of privilege vulnerability exists in the Microsoft Windows kernel. When the kernel API executes privileges, an attacker can exploit the vulnerabili...

chromium-browser: sandbox escape in ppapi

The PPAPI implementation in Google Chrome before 52.0.2743.82 does not validate the origin of IPC messages to the plugin broker process that should have come from the browser process, which allows remote attackers to bypass a sandbox protection mechanism via an unexpected message type, related to...

Google Chrome RCE

The vulnerability of Google Chrome exists due to improper interaction between the IPC component, the Gamepad API, and Google V8. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Google Chrome Data Compromise

The vulnerability exists in Google Chrome due to improper interaction between extensions, IPC, sync APIs, and Google V8. Exploiting this vulnerability allows malicious actors to execute arbitrary code remotely...

Ubuntu 14.04 LTS : Linux kernel (Wily HWE) vulnerabilities (USN-3017-3)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3017-3 advisory. USN-3017-1 fixed vulnerabilities in the Linux kernel for Ubuntu 15.10. This update provides the corresponding updates for the Linux Hardware Enablement H...

Ubuntu 14.04 LTS : Linux kernel (Vivid HWE) vulnerabilities (USN-3020-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3020-1 advisory. Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility...

Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3016-1)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3016-1 advisory. Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility...

USN-3016-3: Linux kernel (Qualcomm Snapdragon) vulnerabilities

Jesse Hertz and Tim Newsham discovered that the Linux netfilter implementation did not correctly perform validation when handling 32 bit compatibility IPTSOSETREPLACE events on 64 bit platforms. A local unprivileged attacker could use this to cause a denial of service system crash or execute...

Android Privilege Escalation

The vulnerability in the libs/binder/IPCThreadState.cpp function of the Android operating system’s Binder component exists due to incorrect references to objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges through a specially create...

iOS Bypass Event Handlers

The vulnerability of the XPC Services software interface in the LaunchServices component of the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass event handler restrictions and modify events of arbitrary application...