Microsoft Windows Remote Code Execution Vulnerability (CNVD-2018-11554)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems. A remote code execution vulnerability exists in...

Windows Denial of Service Vulnerability

A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a...

Multiple Apple Products IOKit Arbitrary Code Execution Vulnerability

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is a set of operating systems developed for mobile devices. macOS High Sierra is a specialized operating system developed for Mac computers. tvOS is a set of operating systems for smart televisions. watchOS is a...

CVE-2018-4219

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "ATS" component. It allows attackers to gain privileges via a crafted app that leverages type confusion...

CVE-2018-4159

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4196

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or obtain sensitive information via a crafted app...

Apple macOS High Sierra Arbitrary Code Execution Vulnerability (CNVD-2018-12162)

Apple macOS High Sierra is a specialized operating system for Mac computers developed by Apple Inc. in the U.S. IOFireWireAVC is one of the IO video transport components. A security vulnerability exists in the IOFireWireAVC component in Apple macOS High Sierra versions prior to 10.13.5. The...

Apple macOS High Sierra ATS Type Obfuscation Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.ATS is one of the Application Transport Security components. A security vulnerability exists in the ATS component in Apple macOS High Sierra versions prior to 10.13.5. The vulnerability can be exploited...

Multiple Apple products libxpc elevation of privilege vulnerability

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is a set of operating systems for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. libxpc ...

Denial of service vulnerability in multiple apple products (CNVD-2018-12165)

Apple iOS, macOS High Sierra, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; macOS High Sierra is a specialized operating system for Mac computers; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. kernel is a...

Apple macOS High Sierra memory corruption vulnerability (CNVD-2018-12245)

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Windows Server is one of the Window Server components. A security vulnerability exists in the Windows Server component of Apple macOS High Sierra versions prior to 10.13.5. The vulnerability can be...

VulnCheck KEV: CVE-2016-3225

The SMB server component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application that forwards an authentication...

The vulnerability of the Microsoft DirectX Graphics Kernel Subsystem (dxgkrnl.sys) on the Windows operating system, which allows a hacker to escalate their privileges

The vulnerability of the Microsoft DirectX Graphics Kernel Subsystem dxgkrnl.sys in the Windows operating system is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...

The vulnerability of the Qualcomm Android operating system’s video driver allows attackers to increase their privileges and execute arbitrary code.

The vulnerability of the Qualcomm Android operating system’s video driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code using a specially crafted application...

The vulnerability of the Qualcomm Sound Codec component in the Android operating system allows a hacker to enhance their privileges and execute arbitrary code.

The vulnerability of the Qualcomm Sound Codec component in the Android operating system is related to insufficient access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary code using a specially crafted application...

Cloud Foundry Arbitrary Code Execution Vulnerability

Pivotal Software Cloud Foundry is an open source Platform-as-a-Service PaaS cloud computing platform from Pivotal Software that provides container scheduling, continuous delivery, and automated service deployment. capi-release and cf-release are both Cloud Foundry releases. A security vulnerabili...

BSA-2018-602

Security Advisory ID : BSA-2018-602 Component : Win32k Revision : 1.0: Final An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel...

Microsoft Windows Common Log File System Driver Elevation of Privilege Vulnerability

Microsoft Windows 7 and others are operating systems released by Microsoft Corporation in the U.S. The Windows Common Log File System CLFS driver is one of the common log file system drivers. The Microsoft Windows CLFS driver suffers from a privileged access vulnerability that stems from the...

Microsoft Windows Kernel 'Win32k.sys' Local Elevation of Privilege Vulnerability

Microsoft Windows 7, etc. are operating systems released by Microsoft Corporation in the U.S. Win32k is the 32-bit environment of its operating system. A local elevation of privilege vulnerability exists in Microsoft Windows Kernel 'Win32k.sys', which stems from a program's failure to properly...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2018-10730)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation USA.Windows Hyper-V is one of the virtualization products that supports the creation of virtual machines in Windows. A remote code execution vulnerability exists in Microsoft Windows Hyper-V that...