CVE-2016-7253

The agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 SP2, and 2016 does not properly check the atxcore.dll ACL, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Server Agent Elevation of Privilege Vulnerability."...

CVE-2016-7225

Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability."...

CVE-2016-7255

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka...

Google Android System UI Local Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. system UI is the system interface that comes with Android. A local elevation of privilege vulnerability exists in System UI in Android 7.0. A local attacker can exploit this...

Microsoft Windows Universal Log File System Driver Elevation of Privilege Vulnerability (CNVD-2016-11022)

Microsoft Windows is a family of operating systems released by the American company Microsoft Microsoft. CLFS is a high-performance, general-purpose log file subsystem. An elevated privilege vulnerability exists when the Windows Common Log File System CLFS driver fails to properly handle objects ...

Microsoft VHD Driver Elevation of Privilege Vulnerability (CNVD-2016-11026)

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Windows VHD is a virtual hard disk driver. An elevation of privilege vulnerability exists in the Microsoft VHD driver. When the Windows Virtual Hard Disk Driver fails to properly handle user access to...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-10978)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the implementation of the Windows Common Log File System CLFS driver that does not properly handle memory objects. Successful exploitation could allow an attacker to run processes with...

MS16-137: Security update for Windows authentication methods: November 8, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The more severe of the vulnerabilities could allow elevation of privilege. To exploit this vulnerability, the attacker would first have to...

CVE-2016-7182

The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010...

Multiple Local Elevation of Privilege Vulnerabilities in Juniper Junos

Juniper Junos is a Juniper Networks network operating system designed for the company's hardware systems. The operating system provides a secure programming interface and the Junos SDK. Juniper Junos has multiple local elevation of privilege vulnerabilities that could be exploited by a local...

Android Mediaserver SoftMPEG4 Component Elevation of Privilege Vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the SoftMPEG4 component of libstagefright in Android's Mediaserver allows remote attackers to exploit the vulnerability to build malicious applications with elevated privileges...

Android MediaTek video driver elevation of privilege vulnerability (CNVD-2016-09571)

Android is an open source operating system based on Linux. A security vulnerability in the MediaTek video driver for Android allows remote attackers to exploit the vulnerability to build malicious applications with elevated privileges...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-09558)

Android is an open source operating system based on Linux. Android's Mediaserver has a security vulnerability that allows a remote attacker to build malicious apps with elevated privileges...

NVIDIA elevation of privilege vulnerability (CNVD-2016-09612)

NVIDIA full name NVIDIA Corporation, NASDAQ: NVDA, official Chinese name NVIDIA, founded in January 1993, is a fabless IC semiconductor company focusing on the design of smart-core chipsets. An elevation of privilege vulnerability exists in NVIDIA, which can be exploited by attackers to gain...

Cisco Application Policy Infrastructure Controller Elevation of Privilege Vulnerability

The Cisco Application Policy Infrastructure Controller is a controller that automates the management of application-centric infrastructure ACI. A security vulnerability exists in the Cisco Application Policy Infrastructure Controller installation process, allowing a local attacker to exploit the...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-07926)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A lock screen elevation of privilege vulnerability exists in Microsoft Windows that originates from a program error that allows loading of web content from the Windows lock screen. An attacker in close...

CVE-2016-3379

Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via a meeting-invitation request, aka "Microsoft Exchange Elevation of Privilege Vulnerability."...

CVE-2016-3346

Microsoft Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows local users to obtain Administrator access via a crafted DLL, aka "Windows Permissions Enforcement Elevation of Privilege Vulnerability."...

CVE-2016-3306

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 mishandles session objects, which allows local users to hijack sessions, and consequently gain privileges...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2016-07463)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. An elevation of privilege vulnerability exists in Google Android Mediaserver, which can be exploited by an attacker to gain elevated privileges...