UBUNTU-CVE-2017-0442

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

UBUNTU-CVE-2017-0443

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-6779

An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-6770

An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 4.4.4,...

Google Nexus Broadcom Wi-Fi Driver Elevation of Privilege Vulnerability

Google Android is an operating system developed by Google for smartphones. A security vulnerability in the Google Nexus Broadcom Wi-Fi driver allows remote attackers to exploit the vulnerability via a specially crafted application that can elevate privileges...

Google Nexus Qualcomm Sound driver elevation of privilege vulnerability (CNVD-2016-12201)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm Sound Driver is a Qualcomm-developed sound driver used in it. A power lifting vulnerability exists in the Qualcomm Sound Driver in Android on multiple Google devices. The...

CVE-2016-7226

Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability."...

CVE-2016-3340

The Common Log File System CLFS driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted...

Microsoft Win32k Elevation of Privilege Vulnerability (CNVD-2016-10936)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the kernel mode driver for Microsoft Windows. An attacker could exploit this vulnerability to run arbitrary code in kernel mode...

Microsoft VHD Driver Elevation of Privilege Vulnerability (CNVD-2016-11024)

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Windows VHD is a virtual hard disk driver. An elevation of privilege vulnerability exists in the Microsoft VHD driver. When the Windows Virtual Hard Disk Driver fails to properly handle user access to...

Apple macOS Sierra AppleSMC elevation of privilege vulnerability

Apple macOS Sierra is a suite of specialized operating systems developed by Apple for Mac computers.AppleSMC is one of the components used to reset the System Management Controller on a Mac. Apple macOS Sierra AppleSMC has a security vulnerability. A local attacker can exploit this vulnerability ...

VMware vRealize Operations Remote Elevation of Privilege Vulnerability

VMware vRealize Operations is a set of policy-based, automated, intelligent IT operations and management software from VMware, Inc. A remote elevation of privilege vulnerability exists in VMware vRealize Operations. A remote attacker could exploit this vulnerability to gain full control of an...

Android Qualcomm component elevation of privilege vulnerability (CNVD-2016-09573)

Android is an open source operating system based on Linux. There is a security vulnerability in the Qualcomm component of Android that allows a remote attacker can exploit the vulnerability to build malicious applications and elevate privileges...

Android MediaTek video driver elevation of privilege vulnerability (CNVD-2016-09570)

Android is an open source operating system based on Linux. A security vulnerability in the MediaTek video driver for Android allows remote attackers to exploit the vulnerability to build malicious applications with elevated privileges...

Android Zygote elevation of privilege vulnerability

Android is an open source operating system based on Linux. A security vulnerability in the core/java/android/os/Process.java file in Android's Zygote allows remote attackers to exploit the vulnerability to build malicious applications with elevated privileges...

BlueStacks Elevation of Privilege Vulnerability

BlueStacks is an Android emulator software for PC. An elevation of privilege vulnerability exists in BlueStacks 2.5.55, where the program installation comes with an unquoted path to a system privilege service, which can be used by an attacker to execute arbitrary code on the system for elevation ...

CVE-2016-3305

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 mishandles session objects, which allows local users to hijack sessions, and consequently gain privileges...

Accellion Kiteworks Elevation of Privilege Vulnerability

Accellion Kiteworks is the leading private cloud platform for secure content. An elevation of privilege vulnerability exists in Accellion Kiteworks that allows authenticated KiteWorks users to elevate privileges...

BlueStacks Local Elevation of Privilege Vulnerability

BlueStacks is an Android emulator from the Chinese company BlueStacks. A local boost vulnerability exists in BlueStacks version 2.1.3.5650. A local attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges...

Red Hat JBoss EAP Remote Lift Vulnerability

Red Hat JBoss EAP Enterprise Application Platform is the United States Red Hat Red Hat, Inc. provides a set of enterprise-class security and scalability of enterprise application platform. A remote elevation vulnerability exists in Red Hat JBoss EAP version 7. A remote attacker exploits the...