CVE-2016-0094

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

Symantec Encryption Management Server (SEMS) Local Elevation of Privilege Vulnerability

Symantec Encryption Management Server manages and automates security policies for encryption solutions. A security vulnerability exists in Symantec Encryption Management Server SEMS versions prior to 3.3.2 MP12. This vulnerability allows a local attacker to gain root access by modifying a batch...

Android SystemUI Elevation of Privilege Vulnerability

Android is a cell phone operating system based on the Linux open kernel. Android versions prior to 5.1.1 LMY48Z and 6.0 2015-12-01, SystemUI has a security vulnerability in its implementation, which can be exploited by remote attackers to elevate privileges via a constructed application...

Android kernel elevation of privilege vulnerability

Android is a cell phone operating system based on the Linux open kernel. The kernel in versions prior to Android 5.1.1 LMY48Z and 6.0 2015-12-01 has a security vulnerability in its implementation, which can be exploited by remote attackers to gain elevated privileges via a constructed application...

Rising Antivirus Elevation of Privilege Vulnerability

Rising Antivirus RAV for short is an antivirus product. The system service installed by Rising Antivirus provides the ability to create elevated privilege processes, but there is a vulnerability in the validation process that allows a process with the SYSTEM user identity to be started under any...

Lenovo System Update elevation of privilege vulnerability (CNVD-2015-07326)

Lenovo System Update aka ThinkVantage System Update is a system update software from Lenovo. The service component of Lenovo System Update, SUService.exe, creates a named pipe to provide system update services to low-privileged processes.A security vulnerability exists in Lenovo System Update...

IPPUSBXD Elevation of Privilege Vulnerability

IPPUSBXD is a daemon for the IPP-over-USB printer support program. A security vulnerability exists in IPPUSBXD versions prior to 1.22, which originates from the program listening on all interfaces. A remote attacker could exploit the vulnerability by sending a direct request to gain access to a...

EMC Documentum Content Server Remote Lift Vulnerability (CNVD-2015-05447)

EMC Documentum Content Server is a content management service system from EMC. The system is mainly used to manage Documentum content repository, can create, modify and track documents and other operations. A remote elevation vulnerability exists in EMC Documentum Content Server. A remote attacke...

EMC Documentum Content Server Remote Lift Vulnerability (CNVD-2015-05446)

EMC Documentum Content Server is a content management service system from EMC. The system is mainly used to manage Documentum content repository, can create, modify and track documents and other operations. A remote elevation vulnerability exists in EMC Documentum Content Server. A remote attacke...

EMC Documentum Content Server Remote Lift Vulnerability (CNVD-2015-05445)

EMC Documentum Content Server is a content management service system from EMC. The system is mainly used to manage Documentum content repository, can create, modify and track documents and other operations. A remote elevation vulnerability exists in EMC Documentum Content Server. A remote attacke...

EMC Documentum Content Server Remote Lift Vulnerability (CNVD-2015-05448)

EMC Documentum Content Server is a content management service system from EMC. The system is mainly used to manage Documentum content repository, can create, modify and track documents and other operations. A remote elevation vulnerability exists in EMC Documentum Content Server. A remote attacke...

Hacking Team attack code analysis Part5 Adobe Font Driver kernel privilege elevation vulnerability the second bomb+Win32k KALSR bypass vulnerability-vulnerability warning-the black bar safety net

0x01 vulnerability principle analysis: By simply browsing attack code, we know the attack code used a Win32k. sys in the KASLR bypass vulnerability get the Win32k base, and organize the ROP chain, at the same time, load a font filefont-data. binto use the font driver vulnerability, trigger the RO...

IBM PowerVC Local Elevation of Privilege Vulnerability

IBM PowerVC is a suite of virtualization management solutions. A local elevation of privilege vulnerability exists in IBM PowerVC, allowing a local attacker to exploit the vulnerability to elevate privileges...

Google Android 'bindBackupAgent()' function remote code execution vulnerability

Android is an operating system based on the Linux open kernel and is a mobile operating system announced on November 5, 2007 by Google Inc. Android version 4.4.4 suffers from an elevation of privilege and race condition vulnerability in the backup agent implementation. An attacker with access to...

Linux kernel chown() elevation of privilege vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. An elevation of privilege vulnerability exists in the Linux kernel, which originates from an elevation of privilege vulnerability when a program uses the chown command to chan...

Apple OS X Elevation of Privilege Vulnerability

Apple OS X is the operating system used by the Apple family of machines. Apple OS X suffers from an elevation of privilege vulnerability. An attacker could exploit this vulnerability to bypass authentication and gain administrative privileges...

Microsoft windows kernel local elevation of privilege vulnerability (CNVD-2015-01620)

Microsoft Windows is a popular operating system. Microsoft windows kernel suffers from a local elevation of privilege vulnerability M, due to Windows registry virtualization failing to properly restrict user access to virtual storage modifications. It allows local attackers to exploit the...

Microsoft Internet Explorer Remote Elevation of Privilege Vulnerability (CNVD-2015-01089)

Microsoft Internet Explorer is a popular WEB browser. A remote elevation of privilege vulnerability exists in Microsoft Internet Explorer, which allows attackers to exploit this vulnerability to elevate privileges...

Microsoft SharePoint Foundation Privilege Elevation Vulnerability (3000431)

This host is missing an important security update according to Microsoft Bulletin MS14-073. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Hyper-V Privilege Elevation Vulnerability (2893986)

This host is missing a important security update according to Microsoft Bulletin MS13-092. OpenVAS Vulnerability Test $Id: secpodms13-092.nasl 6093 2017-05-10 09:03:18Z teissa $ Microsoft Hyper-V Privilege Elevation Vulnerability 2893986 Authors: Veerendra G.G Copyright: Copyright C 2013 SecPod,...