Elevation of Privilege vulnerability when installing Intel Wireless Drivers and related Software

Summary: Intel is releasing software updates that mitigate a security vulnerability in executables to install Intel Wireless drivers. Description: DLL injection vulnerability in the installation executables Autorun.exe and Setup.exe for Intel's wireless drivers and related software allows a local...

Windows Security Feature Bypass Vulnerability

A security feature bypass exists when Windows incorrectly validates kernel driver signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed drivers into the kernel. In an attack scenario, an attacker could bypass security...

Linux RNG Flaws

Linux RNG flaws CVE-2018-1108 There are several issues in drivers/char/random.c, in particular related to the behavior of the /dev/urandom RNG during and shortly after boot. I'm sending this to [email protected] and Theodore Ts'o for now; it might make sense to also add Jason Donenfeld, since...

Microsoft Windows 10: Load and unload device drivers

This policy setting determines which users can dynamically load and unload device drivers. This user right is not required if a signed driver for the new hardware already exists in the driver.cab file on the device. Device drivers run as highly privileged code. Windows supports the Plug and Play...

Apple macOS High Sierra NVIDIA Graphics Drivers Memory Read Limit Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.NVIDIA Graphics Drivers is one of the graphics driver components. A security vulnerability exists in NVIDIA Graphics Drivers in Apple macOS High Sierra versions prior to 10.13.4. An attacker can exploit...

Facebook Plans to Build Its Own Chips For Hardware Devices

A new job opening post on Facebook suggests that the social network is forming a team to build its own hardware chips, joining other tech titans like Google, Apple, and Amazon in becoming more self-reliant. According to the post, Facebook is looking for an expert in ASIC and FPGA—two custom silic...

Linux kernel denial of service vulnerability (CNVD-2018-08760)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the drivers/scsi/libsas/sasscsihost.c file in Linux kernel versions prior to 4.16. A local attacker could exploit this vulnerability...

Design/Logic Flaw

DISPUTED drivers/scsi/libsas/sasscsihost.c in the Linux kernel before 4.16 allows local users to cause a denial of service ata qc leak by triggering certain failure conditions. NOTE: a third party disputes the relevance of this report because the failure can only occur for physically proximate...

March 13, 2018—KB4088776 (OS Build 16299.309)

None None...

USN-3617-2 linux-hwe, linux-gcp, linux-oem vulnerabilities

USN-3617-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS. It was discovered that a race condition leading to a use-after-free vulnerability existed in t...

USN-3617-1: Linux kernel vulnerabilities

It was discovered that a race condition leading to a use-after-free vulnerability existed in the ALSA PCM subsystem of the Linux kernel. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2017-0861 It was discovered that the KVM...

CVE-2018-4138

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4138

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4138

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2018-4138

CVE-2018-4138 affects macOS High Sierra before 10.13.4, targeting the NVIDIA Graphics Drivers. The issue is a memory-read restriction bypass via a crafted app, enabling a local attacker to read restricted memory. Root cause is a validation/memory handling issue in the NVIDIA Graphics Drivers comp...

CVE-2018-6253

NVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers where a specially crafted pixel shader can cause infinite recursion leading to denial of service...

CVE-2018-6253

CVE-2018-6253 affects NVIDIA GPU Display Driver with a flaw in the DirectX and OpenGL Usermode drivers: a specially crafted pixel shader can cause infinite recursion, leading to denial of service. The vulnerability is detailed across multiple disclosures (NVD CVSS 2.0/3.0 showing MEDIUM base seve...

CVE-2018-6253

NVIDIA GPU Display Driver contains a vulnerability in the DirectX and OpenGL Usermode drivers where a specially crafted pixel shader can cause infinite recursion leading to denial of service...

macOS 10.13.x < 10.13.4 Multiple Vulnerabilities

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.4. It is, therefore, affected by multiple vulnerabilities in the following components : - Admin Framework - APFS - ATS - CoreFoundation - CoreText - Disk Images - Disk Management - File System Events - iCloud...