8752 matches found
CVE-2016-3302
Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...
CVE-2016-3302
Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...
Privilege escalation
Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...
CVE-2016-3302
Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...
Icecream Apps Insecure File Permissions / Privilege Escalation
Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software Versions Affected: Icecream Ebook Reader 4.21 | Icecream Screen Recorder 4.21...
CVE-2016-3302: Undefined Security Weakness
Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607, when the lock screen is enabled, do not properly restrict the loading of web content, which allows physically proximate attackers to execute arbitrary code via a 1 crafted Wi-Fi access point or 2...
Microsoft Windows Lock Screen Elevation of Privilege Vulnerability (3178469)
This host is missing an important security update according to Microsoft Bulletin MS16-112. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Cumulative update for Windows 10 Version 1607: September 13, 2016
None None...
MS16-112: Description of the security update for Windows lock screen: September 13, 2016
None None...
PT-2016-2758
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 Gold, 10 1511, 10 1607, Windows Server 2012 R2, Windows RT 8.1 Description The issue is related to the incorrect restriction of web content loading when the lock screen is enabled, allowing a local attacker t...
MS16-112: Security Update for Windows Lock Screen (3178469)
The remote Windows host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability due to improperly allowing web content to load from the Windows lock screen. A local attacker can exploit this, by connecting to a maliciously configured WiFi hotspot or by...
Android Telephony Denial of Service Vulnerability
Android is a cell phone operating system based on the Linux open kernel. elephony is one of the components that provides telephony functionality. A denial of service vulnerability exists in Android Telephony. An attacker can exploit this vulnerability with the help of a specially crafted...
CVE-2016-3898
Telephony in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to cause a denial of service loss of locked-screen 911 TTY functionality via a crafted application that modifies the TTY mode by broadcasting an intent, aka internal bug...
CVE-2016-3898
Telephony in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to cause a denial of service loss of locked-screen 911 TTY functionality via a crafted application that modifies the TTY mode by broadcasting an intent, aka internal bug...
[SECURITY] Fedora 23 Update: slock-1.3-2.fc23
This is the simplest X screen locker we are aware of. It is stable and quite a lot people in this community are using it every day when they are out with friends or fetching some food from the local pub...
[SECURITY] Fedora 24 Update: slock-1.3-2.fc24
This is the simplest X screen locker we are aware of. It is stable and quite a lot people in this community are using it every day when they are out with friends or fetching some food from the local pub...
[SECURITY] Fedora 25 Update: slock-1.3-2.fc25
This is the simplest X screen locker we are aware of. It is stable and quite a lot people in this community are using it every day when they are out with friends or fetching some food from the local pub...
Debian DLA-598-1 : suckless-tools security update
It was discovered that the slock screen locking tool would segfault when the user's account had been disabled. slock called crypt3 and used the return value for strcmp3 without checking to see if the return value of crypt3 was a NULL pointer. If the hash returned by getspnam-sppwdp was invalid,...
Win32k Forms Creation Denial of Service Vulnerability
Win32k.sys is a multi-user management driver file for Windows XP. There is a denial-of-service vulnerability in Win32k form creation, which occurs when a parameter in a system service function in Win32k.sys fails to be correctly checked, causing the local kernel to deny service when the user runs...
