RPMB Process Bypass Certificate Verification

The vulnerability of the RPMB process in the Android operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to bypass certificate verification...

Google Android is vulnerable

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There is a security vulnerability in Android. An attacker can exploit the vulnerability to overwrite dynamically protected DDR regions...

Microsoft Windows ActiveX Control Local Information Disclosure Vulnerability

Microsoft Windows is the popular computer operating system. An information disclosure vulnerability exists in the instantiation of ActiveX objects in some versions of Windows, allowing an attacker to access protected memory...

SMBv1 Privilege Escalation

The vulnerability of the SMBv1 protocol in Microsoft Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to gain access to protected information in the process memory using specially crafted packets...

OpenSSL ASN1_TFLG_COMBINE Information Disclosure

The vulnerability of the ASN1TFLGCOMBINE implementation crypto/asn1/tasndec.c in the OpenSSL library is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain protected information from the process’s memory...

Mac OS X Kernel Memory Disclosure DoS

The vulnerability of the Mac OS X operating system’s kernel is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information in the kernel’s memory or cause a service failure through a...

iOS Mac OS X Memory Disclosure

The vulnerability of the IOHIDFamily component in iOS and Mac OS X operating systems is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to the protected memory structure through a specially created application...

Adobe Acrobat Document Cloud PDF Memory Access

The vulnerabilities of Adobe Acrobat and Adobe Acrobat Document Cloud for editing PDF files, as well as Adobe Reader and Adobe Reader Document Cloud for viewing PDF files, are related to deficiencies in access control mechanisms. Exploiting these vulnerabilities can allow attackers to gain access...

iOS Memory Disclosure

The vulnerability of the NetworkExtension kernel component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information stored in memory through a specially...

Information disclosure through polygon rendering in MathML — Mozilla

Security researcher Tyson Smith and Jesse Schwartzentruber of the BlackBerry Security Automated Analysis Team used the Address Sanitizer tool while fuzzing to discover an out-of-bounds read during polygon rendering in MathML. This can allow web content to potentially read protected memory...