CVE-2018-8933

CVE-2018-8933 affects AMD EPYC Server processors. The vulnerability stems from insufficient access control for protected memory regions (FALLOUT-1/2/3), enabling circumvention of platform security controls and potential unauthorized access to memory. Impact is described as high (confidentiality, ...

Google Android RPMB Driver Qualcomm Component Elevation of Privilege Vulnerability

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Qualcomm component of the Google Android RPMB driver. An attacker can exploit this vulnerability to achieve elevatio...

The vulnerability of the Sample App component of the Android operating system from the CAF repository allows a perpetrator to gain unauthorized access to protected memory.

The vulnerability of the Sample App component of the Android operating system in the CAF repository arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected memory...

The vulnerability of the TrustZone component of the Android operating system from the CAF repository, which allows a perpetrator to gain unauthorized access to protected memory.

The vulnerability of the TrustZone component of the Android operating system from the CAF repository relates to the use of an uninitialized variable during system calls. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected memor...

The vulnerability of the RPMB process in the Android operating system allows a hacker to bypass certificate verification.

The vulnerability of the RPMB process in the Android operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification...

Google Android is vulnerable

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There is a security vulnerability in Android. An attacker can exploit the vulnerability to overwrite dynamically protected DDR regions...

Microsoft Windows ActiveX Control Local Information Disclosure Vulnerability

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in the instantiation of ActiveX objects in some versions of Windows, allowing an attacker to access protected memory...

The vulnerability of the SMBv1 protocol in the Microsoft Windows operating system allows a perpetrator to gain access to protected information.

The vulnerability of the SMBv1 protocol in Microsoft Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to protected information in the process memory using specially crafted packets...

The vulnerability of the ASN1_TFLG_COMBINE implementation in the OpenSSL library allows a hacker to extract sensitive information from the process’ memory.

The vulnerability of the ASN1TFLGCOMBINE implementation crypto/asn1/tasndec.c in the OpenSSL library is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain protected information from the process’s memory...

The vulnerability of the Mac OS X operating system allows a perpetrator to gain access to protected information in the kernel’s memory or cause a service failure.

The vulnerability of the Mac OS X operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information in the kernel’s memory or cause a service failure through a...

Vulnerabilities of iOS and Mac OS X operating systems, which allow attackers to gain access to the protected information in the memory structure

The vulnerability of the IOHIDFamily component in iOS and Mac OS X operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to the protected memory structure through a specially created application...

The vulnerabilities of Adobe Acrobat and Adobe Acrobat Document Cloud for PDF file editing, as well as Adobe Reader and Adobe Reader Document Cloud for PDF file viewing, allow attackers to gain access to protected information stored in the process memory.

The vulnerabilities of Adobe Acrobat and Adobe Acrobat Document Cloud for editing PDF files, as well as Adobe Reader and Adobe Reader Document Cloud for viewing PDF files, are related to deficiencies in access control mechanisms. Exploiting these vulnerabilities can allow attackers to gain access...

The vulnerability of the iOS operating system, which allows a perpetrator to gain access to protected information stored in memory

The vulnerability of the NetworkExtension kernel component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information stored in memory through a specially...

Information disclosure through polygon rendering in MathML — Mozilla

Security researcher Tyson Smith and Jesse Schwartzentruber of the BlackBerry Security Automated Analysis Team used the Address Sanitizer tool while fuzzing to discover an out-of-bounds read during polygon rendering in MathML. This can allow web content to potentially read protected memory...