CVE-2016-10427

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD...

Design/Logic Flaw

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD...

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Google Chrome Skia Buffer Overflow Vulnerability (CNVD-2018-08960)

Google Chrome is a web browser developed by Google, Inc. Skia is an open source 2D graphics library that provides common APIs that work on a variety of hardware and software platforms. A heap buffer overflow vulnerability exists in Skia in versions prior to Google Chrome 65.0.3325.146, which stem...

Important: Red Hat Security Advisory: kernel-alt security, bug fix, and enhancement update

An update for kernel-alt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

hw: cpu: speculative execution bounds-check bypass

An industry-wide issue was found in the way many modern microprocessor designs have implemented speculative execution of instructions a commonly used performance optimization. There are three primary variants of the issue which differ in the way the speculative execution can be exploited. Variant...

Microsoft Windows 'HTTP.sys' CVE-2018-0956 Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microso...

Microsoft Windows Device Guard CVE-2018-0966 Remote Security Bypass Vulnerability

Description Microsoft Windows is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit System...

Microsoft Active Directory CVE-2018-0890 Security Bypass Vulnerability

Description Microsoft Active Directory is prone to a security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for...

Microsoft Windows Hyper-V CVE-2018-0964 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1803 for x64-based Systems Microsoft Windows 10 version...

Microsoft Windows Remote Desktop Protocol CVE-2018-0976 Denial of Service Vulnerability

Description Microsoft Windows Remote Desktop Protocol is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the target service to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems...

Microsoft Windows SNMP Service CVE-2018-0967 Denial of Service Vulnerability

Description Microsoft Windows SNMP Service is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the target service to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft...

Microsoft Windows Graphics Component CVE-2018-8116 Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the target system to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Versi...

Google Android System Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An information disclosure vulnerability exists in the sdpserver.cc file in Android in the sdpserverhandleclientreq file, which stems from a lack of boundary detection in the...

Google Android libframesequence Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. libframesequence is a library of GIF image tools. A denial of service vulnerability exists in the 'FrameSequencegif::FrameSequencegif' function of libframesequence in Android, whi...

Google Android Buffer Overflow Vulnerability (CNVD-2018-07849)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A stack overflow vulnerability exists in the avrcctrlparsvendorrsp in the avrcparsct.cc file in Android, which stems from a lack of boundary detection in the program. A remote...

Google Android NFC Driver Elevation of Privilege Vulnerability

Android is a set of Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA for short.NFC Near Field Communication driver is one of the Near Field Communication drivers. The NFC driver in Android suffers from a boost vulnerability that stems from th...

Google Android Remote Code Execution Vulnerability (CNVD-2018-07862)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the ihevcdfmtconv.c file of ihevcdfmtconv in Android, which stems from a lack of boundary detection in the program. A remote attack...

Google Android System Remote Code Execution Vulnerability (CNVD-2018-07453)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the avrcparsvendorcmd of the avrcparstg.cc file in Android, which stems from a lack of boundary detection in the program. A remote...

Google Android Broadcom Component Remote Code Execution Vulnerability (CNVD-2018-07445)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and the Broadcom Bcmdhd driver is a Broadcom WiFi driver used in it. A remote code execution vulnerability exists in the Broadcom bcmdhd driver in Android, which stems from the...