CVE-2016-3348

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-3348

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-3349

The CVE-2016-3349 issue is a Win32k Elevation of Privilege in Windows where the Windows kernel-mode driver (Win32k.sys) fails to handle memory objects correctly. An attacker who can log on locally and run a crafted application could execute arbitrary code in kernel mode, gaining full control and ...

CVE-2016-3348: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-3349: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

[SECURITY] Fedora 25 Update: php-horde-Horde-Mime-Viewer-2.2.1-1.fc25

Provides rendering drivers for MIME data...

PT-2016-2748

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to the kernel-mode drivers in Microsoft Windows, which have inadequate access restrictions. This allows a local attacker to gain elevated privileges by usin...

PT-2016-2749

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold, 1511, and 1607 Description The...

MS16-106: Security Update for Microsoft Graphics Component (3185848)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in Windows kernel-mode drivers due to improper handling of objects in memory. An authenticated, remote attacker can exploit these,...

CVE-2016-3858: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in drivers/soc/qcom/subsystemrestart.c in the Qualcomm subsystem driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application that provides a long string, aka Android internal bug 28675151 and Qualcomm internal bug...

SUSE SLES11 Security Update : kernel (SUSE-SU-2016:2074-1)

The SUSE Linux Enterprise 11 SP2 kernel was updated to receive various security and bug fixes. The following security bugs were fixed : - CVE-2016-4486: Fixed 4 byte information leak in net/core/rtnetlink.c bsc978822. - CVE-2016-3134: The netfilter subsystem in the Linux kernel did not validate...

SUSE SLED12 / SLES12 Security Update : libvirt (SUSE-SU-2016:2053-1)

This update for libvirt fixes one security issue : - CVE-2016-5008: Empty VNC password disables authentication. bsc987527 Additionally, the update includes the following non-security fixes : - Improve waiting for block job readines in virsh. bsc989755 - Parse negative values in augeas lenses...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of Qualcomm’s Android operating system stems from buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application, which is related to the files arch/arm/mach-msm/qdsp6v2/audioutils.c and...

CVE-2016-5342: Out-of-bounds Write

Heap-based buffer overflow in the wcnsswlanwrite function in drivers/net/wireless/wcnss/wcnsswlan.c in the wcnsswlan device driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of...

The vulnerability of the Android operating system, which allows a perpetrator to trigger a service failure or cause other effects

The vulnerability of the drivers/thermal/supplylmcore.c file in the Qualcomm Android operating system is related to the lack of a check on the count parameter. Exploiting this vulnerability can allow an attacker to cause service failures or other effects through a specially created application...

PT-2018-6707

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.7 Description: The issue arises from the amd gpio remove function in drivers/pinctrl/pinctrl-amd.c, which calls the pinctrl unregister function, resulting in a double free. Recommendations: For Linux kernel...

The vulnerability of the Microsoft Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of Microsoft Windows operating system’s kernel mode drivers is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially created application...

Memory corruption due to an unsanitized pointer in the NVIDIA display driver

Lenovo Security Advisory: LEN-3313 Potential Impact: Escalation of privileges Severity: Medium Summary: A vulnerability has been found in the NVIDIA driver that could be used to allow a local, non-privileged user to corrupt kernel memory. This could be used to gain local root privileges...

Hazards 9 million Android devices a high-pass vulnerability details exposure（CVE-2 0 1 6-3 8 4 2,containing the POC-the exploit-warning-the black bar safety net

! One, Preface Just a few days before, a security research expert in the Qualcomm chip found within a series of severe Android security vulnerability, affected by these vulnerabilities of the Android smartphones and tablets, the number will exceed nine million units. More terrible is, most affect...

Android on Nexus Qualcomm Component Privilege Acquisition Vulnerability (CNVD-2016-06231)

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...