The vulnerability of the iOS operating system allows a hacker to bypass the sandbox mechanism and read the values of configuration settings.

The vulnerability of the Sandboxprofiles component of the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the sandbox mechanism and read configuration values using a specially crafted application...

Google Chrome Phishing Spoofing Vulnerability

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. A phishing spoofing vulnerability exists in versions of Google Chrome prior to 45.0.2454.85, which allows remote attackers to spoof content via a crafted application...

The vulnerability of the Mac OS X operating system allows a hacker to execute arbitrary code in a privileged context.

The vulnerability of the Install Framework Legacy component in the Mac OS X operating system is related to deficiencies in the privilege termination process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context through a specially crafted...

The vulnerability of the Windows operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the win32k.sys driver in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a local attacker to gain access to protected information through a specially crafted application...

CVE-2015-2479

The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers to execute arbitrary code via a crafted .NET application, aka "RyuJIT Optimization Elevation of Privilege Vulnerability," a different vulnerability than...

Security feature bypass

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafte...

CVE-2015-2465

The Windows shell in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 does not properly constrain impersonation levels, which allows local users to gain privileges via a...

Microsoft Windows Privilege Elevation Vulnerabilities (3060716)

This host is missing an important security update according to Microsoft Bulletin MS15-090. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-090: Vulnerabilities in Microsoft Windows Could Allow Elevation of Privilege (3060716)

The remote Windows host is affected by multiple elevation of privilege vulnerabilities in Windows Object Manager : - A flaw exists in Windows Object Manager due to a failure to properly validate and enforce impersonation levels. A remote, authenticated attacker can exploit this vulnerability, via...

CVE-2015-1805

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed copytouserinatomic and copyfromuserinatomic calls, which allows local users to cause a denial of service system crash or possibly gain privileges via a...

Design/Logic Flaw

The 1 piperead and 2 pipewrite implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed copytouserinatomic and copyfromuserinatomic calls, which allows local users to cause a denial of service system crash or possibly gain privileges via a...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the win32k.sys driver in the Windows operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially crafted application...

Microsoft Windows Server Information Disclosure Vulnerability

Microsoft Windows Server is a series of servers based on the windows operating system launched by the United States Microsoft Microsoft. Microsoft Windows Server 2003 SP2 R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold...

Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2015-04662)

Microsoft Windows Server is a series of servers based on the windows operating system launched by the U.S. Microsoft Microsoft. A security vulnerability exists in the graphics component of Microsoft Windows. A local attacker could exploit the vulnerability to gain privileges through incorrect...

Privilege escalation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted...

Memory corruption

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted...

Information disclosure

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from...

CVE-2015-2387

CVE-2015-2387 discusses a local privilege-escalation in the ATMFD.DLL component of the Windows Adobe Type Manager Font Driver. Concrete details from connected sources show multiple OTF/TTF vulnerabilities in ATMFD.DLL (and related font subsystems) that allowed memory corruption via crafted font d...

PT-2015-1541 · Microsoft +1 · Windows 8 +9

Name of the Vulnerable Software and Affected Versions: Adobe Type Manager Font Driver versions in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1...

Mac OS X Multiple EFI Vulnerabilities (EFI Security Update 2015-001)

The remote Mac OS X host is running EFI firmware that is affected by multiple vulnerabilities : - An insufficient locking issue exists, when resuming from sleep states, which allows a local attacker to write to the EFI flash memory by using an crafted application with root privileges. CVE-2015-36...