CVE-2020-14974

The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes even ones running as SYSTEM that hold a handle, via IOCTL code 0x222124...

Code injection

The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code 0x222124...

Code injection

The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes even ones running as SYSTEM that hold a handle, via IOCTL code 0x222124...

CVE-2020-14974

The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes even ones running as SYSTEM that hold a handle, via IOCTL code 0x222124...

CVE-2020-14975: Undefined Security Weakness

The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code 0x222124...

CVE-2020-14974: Undefined Security Weakness

The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes even ones running as SYSTEM that hold a handle, via IOCTL code 0x222124...

PT-2020-14101

Name of the Vulnerable Software and Affected Versions IOBit Unlocker version 1.1.2 Description The issue allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code 0x222124. Recommendations For IOBit Unlocker version 1.1.2, consider restricting access to the IOCTL code...

PT-2020-14100

Name of the Vulnerable Software and Affected Versions IOBit Unlocker version 1.1.2 Description The issue allows a low-privileged user to unlock a file and kill processes, including those running as SYSTEM, that hold a handle, via IOCTL code 0x222124. Recommendations For IOBit Unlocker version...

PT-2020-12663

Name of the Vulnerable Software and Affected Versions WinMagic SecureDoc versions 8.5 and earlier Description The issue allows local users to write to arbitrary kernel memory addresses due to the lack of pointer validation in the IOCTL dispatcher of the SDDisk2k.sys driver. This can result in...

CVE-2020-11520: Improper Restriction of Operations within the Bounds of a Memory Buffer

The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation. Exploiting this vulnerability results in privileged code execution...

PT-2020-9474

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions in APQ8053, APQ8096AU, MDM9607, MSM8909W, MSM8996, MSM8996AU, QCN7605, QCS605, SC8180X, SDA845, SDX20, SDX24, SDX55, SM8150, SXR1130 Description: The issue arises when the IPA driver processes a route add rule IOC...

CVE-2019-14047: Improper Input Validation

While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit list in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon...

Code injection

ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HID device...

CVE-2020-9332

The CVE-2020-9332 entry concerns ftusbbus2.sys in FabulaTech USB for Remote Desktop (through 2020-02-19). The vulnerability enables privilege escalation via a crafted IOCTL code related to a USB HID device, exposing local escalation risk via the USB driver component. Affected component: ftusbbus2...

CVE-2020-9332: Undefined Security Weakness

ftusbbus2.sys in FabulaTech USB for Remote Desktop through 2020-02-19 allows privilege escalation via crafted IoCtl code related to a USB HID device...

PT-2020-3022

Name of the Vulnerable Software and Affected Versions FabulaTech USB for Remote Desktop versions through 2020-02-19 Description The issue is related to errors in privilege management in the ftusbbus2.sys component. It allows an attacker to escalate privileges using a specially crafted IoCtl code...

EulerOS 2.0 SP2 : kernel (EulerOS-SA-2020-1674)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the...

EulerOS 2.0 SP2 : util-linux (EulerOS-SA-2020-1620)

According to the version of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - runuser in util-linux allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the...

CVE-2020-0235

In crusspsharedioctl we first copy 4 bytes from userdata into "size" variable, and then use that variable as the size parameter for "copyfromuser", ending up overwriting memory following "crussphdr". "crussphdr" is a static variable, of type "struct crusspioctlheader".Product: AndroidVersions:...

PT-2020-11592

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue arises in the crus sp shared ioctl function where 4 bytes from user data are copied into the size variable. This variable is then used as the size parameter for copy from user, resulting in the overwrite of...