VulnCheck KEV: CVE-2019-0880

A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity...

Hacker Discloses Second Zero-Day to Bypass Patch for Windows EoP Flaw

An anonymous security researcher going by the name of SandboxEscaper today publicly shared a second zero-day exploit that can be used to bypass a recently patched elevation of privilege vulnerability in the Microsoft Windows operating system. SandboxEscaper is known for publicly dropping zero-day...

Google Android System Elevation of Privilege Vulnerability (CNVD-2019-23100)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the System component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. No details of the vulnerability are provided at this...

Rapid7's Windows InsightIDR Local Elevation of Privilege Vulnerability

Rapid7 Insight Agent is a lightweight software from Rapid7 USA. The software is capable of collecting data from IT assets. A security vulnerability exists in Rapid7 Insight Agent 2.6.3 and earlier versions. An attacker can exploit the vulnerability to elevate privileges to SYSTEM...

Intel Unite Client Elevation of Privilege Vulnerability

Intel UniteR Client is a conferencing client from Intel Corporation. A security vulnerability exists in Intel UniteR Client versions prior to 4.0. An attacker could exploit the vulnerability to elevate privileges...

CVE-2019-0942

An elevation of privilege vulnerability exists in the Unified Write Filter UWF feature for Windows 10 when it improperly restricts access to the registry, aka 'Unified Write Filter Elevation of Privilege Vulnerability'...

CVE-2019-0892

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'...

CVE-2019-0734

An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator.The update addresses this vulnerability by changing how...

Microsoft Azure Active Directory Connect Remote Elevation of Privilege Vulnerability (CNVD-2019-14680)

Microsoft Azure Active Directory Connect ADC is a service from Microsoft that provides identity and access management in the cloud. A remote elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect. It allows an attacker to execute two PowerShell Cmdlets in the...

Wacom driver elevation of privilege vulnerability

Wacom driver is a driver for connecting and managing platform computers. An input validation error vulnerability exists in the 'startLaunchDProcess' and 'stopLaunchDProcess' functions in the Wacom driver. The vulnerability stems from the network system or product not properly validating input dat...

Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2019-39031)

Microsoft SharePoint is a browser-based collaboration and document management platform. An elevation of privilege vulnerability exists in Microsoft SharePoint. An attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint Server to conduct a...

Google Android seccomp elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android Kernel component seccomp. An attacker can exploit this vulnerability to bypass seccomp and elevate privileges...

Google Android Framework SmsDefaultDialog.java file elevation of privilege vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the SmsDefaultDialog.onStart file in Android. An attacker can exploit this vulnerability to bypass user interaction requests and gain additional...

CVE-2019-0786

An elevation of privilege vulnerability exists in the Microsoft Server Message Block SMB Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine, aka 'SMB Server Elevation of Privilege Vulnerability'...

CVE-2019-0731

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver luafv.sys, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836, CVE-2019-0841...

CVE-2019-0808

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797...

CVE-2019-0682

An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0689, CVE-2019-0692, CVE-2019-0693, CVE-2019-0694...

KB4493475: Windows 10 April 2019 Security Update

The remote Windows host is missing security update 4493475. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard when Windows improperly handles calls to the LUAFV driver luafv.sys...

GOG Galaxy Elevation of Privilege Vulnerability

GOG Galaxy is a game client program. The program is used to install, launch and update games. An elevated privilege vulnerability exists in GOG Galaxy that originates from a lack of effective privilege licensing and access control measures on a networked system or product. An attacker could explo...

Apache HTTP Server Local Elevation of Privilege Vulnerability

Apache HTTP Server is the United States Apache Apache Software Foundation of an open source web server . A local elevation of privilege vulnerability exists in Apache HTTP Server. An attacker could exploit the vulnerability to gain elevated privileges on an affected application...