AMD μProf 安全漏洞

AMD μProf is a performance analysis tool from AMD for applications running on Windows, Linux and FreeBSD operating systems. A security vulnerability exists in AMD μProf, which stems from the fact that the AMDPowerProfiler.sys driver may allow a low-privileged user to access the MSR in the kernel,...

The vulnerability of the Sn5CrPack and Sn5Crypto cryptographic containers in the Secret Net Studio information protection system, which allows a hacker to trigger a service failure.

The vulnerability of the Sn5CrPack and Sn5Crypto crypto containers in the Secret Net Studio information protection system lies in the ability to directly access the driver without going through the Sn5CryptoApi.dll library, by sending an IOCTL request. Exploiting this vulnerability can allow a...

kernel: Integer overflow in drivers/gpu/drm/udl/udl_fb.c:udl_fb_mmap() can allow attackers to execute code in kernel space

A an integer overflow vulnerability was discovered in the Linux kernel, from version 3.4 through 4.15, in the drivers/gpu/drm/udl/udlfb.c:udlfbmmap function. An attacker with access to the udldrmfb driver could exploit this to obtain full read and write permissions on kernel physical pages,...

Sophos HitmanPro.Alert hmpalert 0x222000 kernel memory disclosure vulnerability

Summary An exploitable memory disclosure vulnerability exists in the 0x222000 IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the driver to return uninitialized memory, resulting in kernel memory disclosure. An attacker can send an IRP...

CVE-2018-16962

Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges...

CVE-2018-16962

Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges...

CVE-2018-16962

CVE-2018-16962 affects Webroot SecureAnywhere on macOS prior to 9.0.8.34. The vulnerability arises from mishandling access to the product’s driver by a process that does not have root privileges, indicating a local privilege escalation risk through kernel-level access control weakness. Affected v...

CVE-2018-16962

Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges...

CVE-2018-6606

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by sending IOCTL 0x80002010 and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate privileges...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of NVIDIA’s Android operating system video driver is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

pty race

The nttywrite function in drivers/tty/ntty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service memory corruption and system crash or gain privileges by triggering a race condition...