CVE-2019-1232

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'...

Privilege escalation

An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to symbolic link attack, aka 'Microsoft Windows Store Installer Elevation of Privilege Vulnerability'...

Google Android Touch driver boost vulnerability (CNVD-2019-37960)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA, and Touch driver is one of the touch drivers. An elevation of privilege vulnerability exists in the Touch driver component in Android. An attacker can exploit this vulnerability to elevate...

Google Android Framework elevation of privilege vulnerability (CNVD-2019-38880)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. There is an elevation of privilege vulnerability in Framework in Android. An attacker can exploit this vulnerability to elevate...

IBM i Privilege Vulnerability

IBM i is an American IBM operating system running in IBM Power Systems and IBM PureSystems based on the EBCDIC code. An elevation vulnerability exists in IBM i version 7.4 configured with Db2 Mirror for i, which can be exploited by an attacker to gain elevated privileges...

Microsoft Windows Subsystem for Linux Privilege Exploit

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Microsoft Windows Server is a server operating system. Windows Subsystem for Linux is one ...

Microsoft Windows NTFS Elevation of Privilege Vulnerability (CNVD-2019-40566)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the Microsoft Windows NTFS sandbox...

CVE-2019-1184 Windows Elevation of Privilege Vulnerability

...

CVE-2019-1130

An elevation of privilege vulnerability exists when Windows AppX Deployment Service AppXSVC improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129...

CVE-2019-1082

An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, is vulnerable to race planting a customized DLL.An attacker who successfully exploited this vulnerability could potentially elevate privilege to SYSTEM.The update addresses this...

CVE-2019-13142

The RzSurroundVADStreamingService RzSurroundVADStreamingService.exe in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable located in %PROGRAMDATA%\Razer\Synapse\Devices\Razer Surround\Driver. The DACL on this folder allows any user to overwrite contents of files in this folder,...

CVE-2019-13142

The RzSurroundVADStreamingService RzSurroundVADStreamingService.exe in Razer Surround 1.1.63.0 runs as the SYSTEM user using an executable located in %PROGRAMDATA%\Razer\Synapse\Devices\Razer Surround\Driver. The DACL on this folder allows any user to overwrite contents of files in this folder,...

HP Support Assistant elevation of privilege vulnerability (CNVD-2019-23306)

HP Support Assistant is a utility program included in all HP computers to diagnose technical problems and manage updates. An elevation of privilege vulnerability exists in HP Support Assistant 8.7.50 and earlier versions. An attacker could use this vulnerability to gain system privileges and make...

Google Android System Elevation of Privilege Vulnerability (CNVD-2019-13576)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the System component of Google Android 9. An attacker can exploit this vulnerability to elevate privileges...

CVE-2018-10959

Avecto Defendpoint 4 prior to 4.4 SR6 and 5 prior to 5.1 SR1 has an Untrusted Search Path vulnerability, exploitable by modifying environment variables to trigger automatic elevation of an attacker's process launch...

GOG Galaxy updater temp directory insecure file permissions local privilege elevation vulnerability

Summary An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy’s Temp directory. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with SYSTEM privileges. Tested Versions...

Lobby Track Desktop elevation of privilege vulnerability (CNVD-2019-12461)

Jolly Technologies Lobby Track Desktop is a desktop visitor management application from Jolly Technologies USA. The program has features such as pre-registering visitors, capturing photos and scanning driver's licenses. An elevation vulnerability exists in Jolly Technologies Lobby Track Desktop...

Lobby Track Desktop Elevation of Privilege Vulnerability

Jolly Technologies Lobby Track Desktop is a desktop visitor management application from Jolly Technologies USA. The program has features such as pre-registering visitors, capturing photos and scanning driver's licenses. An elevation vulnerability exists in Jolly Technologies Lobby Track Desktop...

VMware Workstation Privilege Permission and Access Control Vulnerability (CNVD-2019-07558)

VMware Workstation is a set of virtual machine software from VMware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. An elevation of privilege vulnerability exists in VMware Workstation versions 15.x and 14.x. An attacker could...

CVE-2018-18253

An issue was discovered in CapMon Access Manager 5.4.1.1005. CALRunElevated.exe attempts to enforce access control by adding an unprivileged user to the local Administrators group for a very short time to execute a single command. However, the user is left in that group if the command crashes, an...