CVE-2019-2036

CVE-2019-2036 affects Google Android where in HidHostService.java the function okToConnect contains an incorrect state check, enabling a possible permission bypass. This could allow remote escalation of privilege with no additional execution privileges or user interaction required. The vulnerabil...

CVE-2019-9459

In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79593569...

CVE-2019-9459

The CVE-2019-9459 entry concerns the Android 10 library libttspico. A heap buffer overflow leads to an out-of-bounds write, enabling remote escalation of privilege without user interaction. Documents specify the affected component (libttspico), the vulnerability class (OOB write due to a heap ove...

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9278

CVE-2019-9278 affects libexif. The vulnerability is an out-of-bounds write caused by an integer overflow in libexif, leading to remote escalation of privilege in the media content provider. Exploitation requires user interaction. Affected versions include Android-10 (and related platforms in the ...

The vulnerability of the ADAL.NET library for Windows operating systems, which allows attackers to escalate their privileges

The vulnerability of the ADAL.NET library for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

UBUNTU-CVE-2018-6121

Insufficient validation of input in Blink in Google Chrome prior to 66.0.3359.170 allowed a remote attacker to perform privilege escalation via a crafted HTML page...

The vulnerability of the Kubernetes cluster management software, related to improper error handling, allows a perpetrator to escalate their privileges.

The vulnerability of the Kubernetes cluster management software is related to incorrect error handling. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

The vulnerability of the Cisco Elastic Services Controller network management tool, which stems from the use of pre-installed registration data, allows a perpetrator to escalate their privileges.

The vulnerability of the Cisco Elastic Services Controller network management tool is related to the use of pre-installed registration data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Out-of-bounds

In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege in systemserver with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...

CVE-2019-1986

In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege in systemserver with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...

CVE-2019-1986

In SkSwizzler::onSetSampleX of SkSwizzler.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege in systemserver with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android...

Amazon Linux 2 : systemd (ALAS-2019-1141)

Large syslogd messages sent to journald can cause stack corruption, causing journald to crash. The version of systemd on Amazon Linux 2 is not vulnerable to privilege escalation in this case. CVE-2018-16864 Large native messages to journald can cause stack corruption, leading to possible local...

Important: systemd

Issue Overview: Large syslogd messages sent to journald can cause stack corruption, causing journald to crash. The version of systemd on Amazon Linux 2 is not vulnerable to privilege escalation in this case. CVE-2018-16864 Large native messages to journald can cause stack corruption, leading to...

Multiple Siemens Product Privilege Access Control Vulnerabilities (CNVD-2018-25419)

Siemens SINUMERIK 808D and so on are the German Siemens Siemens company's CNC machine tool system controller. A privilege access control vulnerability exists in multiple Siemens products. A remote attacker could exploit this vulnerability by sending specially crafted authentication requests to...

CVE-2018-9578

In ixheaacdadtscrcstartreg of ixheaacdadtscrccheck.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Version...

CVE-2018-9578

In ixheaacdadtscrcstartreg of ixheaacdadtscrccheck.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Version...

CVE-2018-9556

In ParsePayloadHeader of payloadmetadata.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9...