PT-2018-4670

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU issue occurs during SSD image decryption, potentially leading to memory corruption. This issue affects Qualcomm Snapdragon Automobile,...

PT-2018-4669

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU issue may occur in Android while sanitizing userspace values passed to the tQSEE system call on certain Qualcomm Snapdragon processors...

PT-2018-4672

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU issue exists in some QTEE syscall handlers on certain Qualcomm Snapdragon processors. This issue affects Android devices with these...

PT-2018-4675

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to a TOCTOU vulnerability in the input validation for the bulletin board read syscall. This vulnerability occurs because a pointer dereference is being...

PT-2018-4495

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU condition in Android could lead to a buffer overflow in the playready reader bind function. This issue affects devices with Qualcomm...

PT-2018-4316

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description A Time-of-Check-to-Time-of-Use TOCTOU condition may result in bypassing error condition checks, leading to undefined behavior on Qualcomm Snapdragon Mobile MDM9635M, SD 400,...

Microsoft Windows - CiSetFileCache TOCTOU Incomplete Fix Exploit

Exploit for windows platform in category dos / poc Windows: CiSetFileCache TOCTOU CVE-2017-11830 Incomplete Fix Platform: Windows 10 1709 including Win10S Class: Security Feature Bypass Summary: The fix for CVE-2017-11830 is insufficient to prevent a normal user application adding a cached signin...

Microsoft Windows - CiSetFileCache TOCTOU Incomplete Fix

Microsoft Windows - CiSetFileCache TOCTOU Incomplete Fix Windows: CiSetFileCache TOCTOU CVE-2017-11830 Incomplete Fix Platform: Windows 10 1709 including Win10S Class: Security Feature Bypass Summary: The fix for CVE-2017-11830 is insufficient to prevent a normal user application adding a cached...

Microsoft Windows - 'CiSetFileCache' TOCTOU Incomplete Fix

Windows: CiSetFileCache TOCTOU CVE-2017-11830 Incomplete Fix Platform: Windows 10 1709 including Win10S Class: Security Feature Bypass Summary: The fix for CVE-2017-11830 is insufficient to prevent a normal user application adding a cached signing level to an unsigned file by exploiting a TOCTOU ...

CVE-2018-0966: Time-of-check Time-of-use (TOCTOU) Race Condition

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2017-12410

It is possible to exploit a Time of Check & Time of Use TOCTOU vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Successful exploitation results in the execution of...

Race condition

It is possible to exploit a Time of Check & Time of Use TOCTOU vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Successful exploitation results in the execution of...

CVE-2017-12410

Kaseya VSA Agent

CVE-2017-12410: Concurrent Execution using Shared Resource with Improper Synchronization

It is possible to exploit a Time of Check & Time of Use TOCTOU vulnerability by winning a race condition when Kaseya Virtual System Administrator agent 9.3.0.11 and earlier tries to execute its binaries from working and/or temporary folders. Successful exploitation results in the execution of...

PT-2018-5398

Name of the Vulnerable Software and Affected Versions: Kaseya Virtual System Administrator versions 9.3.0.11 and earlier Description: The issue is related to a Time of Check & Time of Use TOCTOU vulnerability. This vulnerability can be exploited by winning a race condition when the Kaseya Virtual...

Kaseya Virtual System Administrator (VSA) Local Privilege Escalation

Hey, The Local Privilege Escalation vulnerability was found in the Kaseya Virtual System Administrator VSA 1 agent "AgentMon.exe". The agent is a Windows service that periodically executes various programs with aNT AUTHORITY\SYSTEMa privileges. In the Kaseya's default configuration, Windows users...

Design/Logic Flaw

NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate...

CVE-2017-6296

NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate...

CVE-2017-6296

NVIDIA TrustZone Software contains a TOCTOU issue in the DRM application which may lead to the denial of service or possible escalation of privileges. This issue is rated as moderate...

CVE-2017-6296

NVIDIA CVE-2017-6296 affects the TrustZone DRM application in NVIDIA SHIELD TV. The issue is a TOCTOU vulnerability that may lead to denial of service or privilege escalation. Public details identify SHIELD TV SE 6.2 and earlier as affected; NVIDIA’s bulletin indicates updating to SE 6.3 to mitig...