Design/Logic Flaw

A component of the Huawei smartphone has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution...

CVE-2021-22385

CVE-2021-22385 affects Huawei smartphones (Huawei EMUI/Magic UI). The vulnerability is External Control of System or Configuration Setting, enabling a local attacker to cause Kernel code execution. Root cause is external control of configuration/system settings. The connected documents reiterate ...

CVE-2021-22385

A component of the Huawei smartphone has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution...

Huawei EMUI/Magic UI 安全漏洞

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI has a security vulnerability that can be exploited by attackers to cause kernel code execution...

Huawei HarmonyOS Data Processing Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, distributed operating system. Huawei HarmonyOS has a security vulnerability that can be exploited by local attackers to cause kernel code execution...

CVE-2021-22416

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution...

CVE-2021-22416

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution...

Code injection

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution...

CVE-2021-22416

CVE-2021-22416 affects HarmonyOS with a Data Processing Error that enables local attackers to achieve Kernel Code Execution. The vulnerability concerns a component of HarmonyOS and is described across multiple feeds (e.g., Red Hat and CNVD mirrors) as allowing local exploitation to run code in th...

CVE-2021-22416

A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, distributed operating system. Huawei HarmonyOS has a security vulnerability that can be exploited by local attackers to cause kernel code execution...

Linux Kernel Netfilter Heap Out-Of-Bounds Write

/ CVE-2021-22555: Turning \x00\x00 into 10000$ by Andy Nguyen theflow@ theflow@theflow:$ gcc -m32 -static -o exploit exploit.c theflow@theflow:$ ./exploit + Linux Privilege Escalation by theflow@ - 2021 + STAGE 0: Initialization Setting up namespace sandbox... Initializing sockets and message...

Linux Kernel 2.6.19 < 5.9 - 'Netfilter Local Privilege Escalation

/ CVE-2021-22555: Turning \x00\x00 into 10000$ by Andy Nguyen theflow@ theflow@theflow:$ gcc -m32 -static -o exploit exploit.c theflow@theflow:$ ./exploit + Linux Privilege Escalation by theflow@ - 2021 + STAGE 0: Initialization Setting up namespace sandbox... Initializing sockets and message...

Intel Core Processors 输入验证错误漏洞

Intel Core Processors is an Intel Core family of central processing units CPUs from Intel Corporation. A security vulnerability exists in Intel Core Processors, which stems from a Pointer Validation Insufficiency vulnerability in AMD Graphics Driver for Windows 10, which could lead to the executi...

DEBIAN-CVE-2021-20292

There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveausgdma.c in nouveausgdmacreatettm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with ...

DEBIAN-CVE-2021-31440

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

UBUNTU-CVE-2019-25044

The block subsystem in the Linux kernel before 5.2 has a use-after-free that can lead to arbitrary code execution in the kernel context and privilege escalation, aka CID-c3e2219216c9. This is related to blkmqfreerqs and blkcleanupqueue...

PT-2021-4226 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux Kernel version 5.11.15 Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit th...

Corel Parallels Desktop 输入验证错误漏洞

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in the Parallels Tools component of Parallels Desktop version 16.1.2-49151. The vulnerability stems from a lack of proper validation of user-supplied data. An attacker can exploit the...

BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.

...