PT-2018-17976

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to KB3086255 Description An issue was discovered in secdrv.sys that allows a local unprivileged attacker to leak 16 bits of uninitialized kernel PagedPool data due to an uninitialized kernel pool allocation in...

PT-2018-17975

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to KB3086255 Description An issue was discovered that can cause a race condition leading to a use-after-free, allowing an unprivileged attacker to run arbitrary code in the kernel. This is achieved through two...

CVE-2017-15820

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can potentially occur...

CVE-2017-15820: Use After Free

In all Qualcomm products with Android releases from CAF using the Linux kernel, in a KGSL IOCTL handler, a Use After Free Condition can potentially occur...

PT-2018-5992

Name of the Vulnerable Software and Affected Versions: Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description: A Use After Free Condition can potentially occur in a KGSL IOCTL handler. Recommendations: At the moment, there is no...

Debian DSA-4120-1 : linux - security update (Meltdown) (Spectre)

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. - CVE-2017-5715 Multiple researchers have discovered a vulnerability in various processors supporting speculative execution, enabling an attacker...

Exploit for Race Condition in Microsoft

NotSecDrv - A PoC code for CVE-2018-7249 General Descripti...

Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2018-1165: Heap-based Buffer Overflow

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

CVE-2018-1166: Use After Free

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw...

PT-2018-2206

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version Description The issue is related to a use-after-free error in the ALSA /dev/snd/seq driver of the Linux kernel. It may allow an attacker to impact the confidentiality, integrity, and availabilit...

Out-of-bounds

The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service out-of-bounds read and system crash via a large counter value in an 0x62430028 IOCTL call...

CVE-2016-9569

The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service out-of-bounds read and system crash via a large counter value in an 0x62430028 IOCTL call...

CVE-2016-9569

The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service out-of-bounds read and system crash via a large counter value in an 0x62430028 IOCTL call...

CVE-2016-9569: Out-of-bounds Read

The cbstream.sys driver in Carbon Black 5.1.1.60603 allows local users with admin privileges to cause a denial of service out-of-bounds read and system crash via a large counter value in an 0x62430028 IOCTL call...

PT-2018-5091

Name of the Vulnerable Software and Affected Versions Carbon Black version 5.1.1.60603 Description The issue allows local users with admin privileges to cause a denial of service, resulting in an out-of-bounds read and system crash. This is achieved via a large counter value in an IOCTL call,...

PT-2018-10738

Name of the Vulnerable Software and Affected Versions Joyent SmartOS version release-20170803-20170803T064301Z Description This issue allows local attackers to escalate privileges on vulnerable installations. An attacker must first obtain the ability to execute low-privileged code on the target...

Jiangmin Antivirus Denial of Service Vulnerability (CNVD-2018-03302)

Jiangmin Antivirus is a set of online antivirus software from the Chinese Jiangmin Jiangmin New Technology Company. A security vulnerability exists in the KVFG.sys driver file in Jiangmin Antivirus version 16.0.0.100, which is caused by the program failing to validate an input value of IOCtl...

MalwareFox AntiMalware 2.74.0.150 Privilege Escalation

/ Title: MalwareFox AntiMalware 2.74.0.150 - Local Privilege Escalation Date: 03/02/2018 Author: Souhail Hammou Vendor Homepage: https://www.malwarefox.com/ Version: 2.74.0.150 Tested on: Windows 7 32-bit / Windows 10 64-bit CVE: CVE-2018-6606 / include include include BOOL...

CVE-2018-6785

In Jiangmin Antivirus 16.0.0.100, the driver file KSysCall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9A008254...