CVE-2015-8950

arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dmammap call...

Apple OS X Kernel Memory Corruption Vulnerability (CNVD-2016-08113)

Apple OS X is a specialized operating system developed by Apple for Mac computers, of which Kernel is a kernel component. A memory corruption vulnerability exists in the Kernel in Apple OS X version 10.11.6, which can be exploited by a specially crafted application to execute arbitrary code with...

Apple OS X Kernel Memory Corruption Vulnerability (CNVD-2016-08114)

Apple iOS, OS X, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. Kernel is one of the kernel...

Apple OS X Kernel Memory Corruption Vulnerability (CNVD-2016-08116)

Apple iOS, OS X, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. Kernel is one of the kernel...

Apple OS X kernel memory corruption vulnerability (CNVD-2016-08100)

Apple OS X is a specialized operating system developed by Apple for Mac computers. kernel is one of the kernel components. A memory corruption vulnerability exists in the kernel in Apple OS X version 10.11.6. A local attacker can exploit this vulnerability to execute arbitrary code with kernel...

Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2016-07923)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Secure Kernel Mode is one of the kernel function modules. An information disclosure vulnerability exists in the kernel mode functionality in Microsoft Windows 10 Gold and 1511 versions, which stems fr...

The vulnerability of the Mac OS X operating system allows a perpetrator to trigger a service failure, obtain confidential information, or increase their privileges.

The vulnerability of the CoreGraphics component in the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, acting locally, to obtain confidential information from the kernel’s memory, enhance their privileges, or cause a...

The vulnerability of the iOS operating system allows a perpetrator to trigger a service failure or obtain confidential information.

The vulnerability of the IOAcceleratorFamily component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker acting locally to obtain confidential information from the kernel’s memory or trigger a service failure...

The vulnerability of the Mac OS X operating system allows a perpetrator to trigger a service failure or gain access to protected information.

The vulnerability of the Audio component of the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to protected information in the kernel memory or cause a service failure reading...

kernel: compat IPT_SO_SET_REPLACE setsockopt

A flaw was discovered in processing setsockopt for 32 bit processes on 64 bit systems. This flaw will allow attackers to alter arbitrary kernel memory when unloading a kernel module. This action is usually restricted to root-privileged users but can also be leveraged if the kernel is compiled wit...

Apple iOS < 10.0.1 Kernel Memory Information Disclosure (Trident)

Binary data appleios1001check.nbin...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2010-1)

This update for the Linux Kernel 3.12.51-5239 fixes several issues. The following security bugs were fixed : - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2005-1)

This update for the Linux Kernel 3.12.48-5227 fixes several issues. The following security bugs were fixed : - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...

Ubuntu: Security Advisory (USN-3072-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3070-1: Linux kernel vulnerabilities

A missing permission check when settings ACLs was discovered in nfsd. A local user could exploit this flaw to gain access to any file by setting an ACL. CVE-2016-1237 Kangjie Lu discovered an information leak in the Reliable Datagram Sockets RDS implementation in the Linux kernel. A local attacke...

CVE-2016-4655

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app...

VMware Fusion Guest Privilege Escalation Vulnerability (Aug 2016) - Mac OS X

VMware Fusion is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Workstation Guest Privilege Escalation Vulnerability (Aug 2016) - Windows

VMware Workstation is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Player Guest Privilege Escalation Vulnerability (Aug 2016) - Linux

VMware Player is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Player Guest Privilege Escalation Vulnerability (Aug 2016) - Windows

VMware Player is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...