8792 matches found
CVE-2020-13753
The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONENEWUSER and the TIOCSTI ioctl. CLONENEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute comman...
CVE-2020-13753: Improper Input Validation
The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONENEWUSER and the TIOCSTI ioctl. CLONENEWUSER could potentially be used to confuse xdg-desktop-portal, which allows access outside the sandbox. TIOCSTI can be used to directly execute comman...
kernel: use-after-free in drivers/bluetooth/hci_ldisc.c
A flaw was found in the Linux kernel's implementation of the HCI UART driver. A local attacker with access permissions to the Bluetooth device can issue an ioctl, which triggers the hciuartsetproto function in drivers/bluetooth/hcildisc.c. The flaw in this function can cause memory corruption or ...
kernel: denial of service via ioctl call in network tun handling
A flaw was found in the Linux kernel's implementation of networking tunnel device ioctl. A local attacker can cause a denial of service NULL pointer dereference and panic via an ioctl TUNSETIFF call with a dev name containing a / character...
CVE-2020-14957
In Windows cleaning assistant 3.2, the driver file AtpKrnl.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCD...
CVE-2020-14956
In Windows cleaning assistant 3.2, the driver file AtpKrnl.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCA...
CVE-2020-14957: Improper Input Validation
In Windows cleaning assistant 3.2, the driver file AtpKrnl.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCD...
CVE-2020-14956: Improper Input Validation
In Windows cleaning assistant 3.2, the driver file AtpKrnl.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCA...
PT-2020-14087
Name of the Vulnerable Software and Affected Versions Windows cleaning assistant version 3.2 Description The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCD in the driver file...
PT-2020-14086
Name of the Vulnerable Software and Affected Versions Windows cleaning assistant version 3.2 Description The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x223CCA in the driver file...
CVE-2020-14955
In Jiangmin Antivirus 16.0.13.129, the driver file KVFG.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220440...
CVE-2020-14955
In Jiangmin Antivirus 16.0.13.129, the driver file KVFG.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220440...
CVE-2020-14955
The CVE-2020-14955 entry concerns Jiangmin Antivirus 16.0.13.129, where the KVFG.sys driver mishandles input values for IOCTL 0x220440. This input-validation weakness allows local users to trigger a denial of service (BSOD) and potentially other unspecified impacts. The vulnerability is described...
CVE-2020-14955: Improper Input Validation
In Jiangmin Antivirus 16.0.13.129, the driver file KVFG.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220440...
ASUS Aura Sync 1.07.71 Privilege Escalation Exploit
// CVE-2019-17603: ASUS Aura Sync 1.07.71 'ene.sys' EoP Kernel Exploit // Discovered by @dhn // Author of PoC: Connor McGarr @33y0re - https://connormcgarr.github.io // Windows 10 RS1 Version 10.0.14393 Build 14393 // Tested with VBS, HyperGuard, and PatchGuard disabled include include include //...
PT-2020-14085
Name of the Vulnerable Software and Affected Versions Jiangmin Antivirus version 16.0.13.129 Description The issue allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220440 in the driver file KVFG.sys...
IOBit Unlocker Elevation of Privilege Vulnerability
IObit Unlocker is a free program that allows you to unlock in-use or locked files so you can delete, rename or move them. An elevation of privilege vulnerability exists in the driver in IOBit Unlocker 1.1.2. A low-privileged attacker could exploit this vulnerability by using IOCTL code 0x222124 t...
CVE-2020-14974
The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes even ones running as SYSTEM that hold a handle, via IOCTL code 0x222124...