CVE-2016-1807: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the Disk Images subsystem in Apple iOS before 9.3.2, OS X before 10.11.5, tvOS before 9.2.1, and watchOS before 2.2.1 allows local users to obtain sensitive information from kernel memory via unspecified vectors...

PT-2016-2069

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.5 Description The issue allows attackers to obtain sensitive kernel memory-layout information or cause a denial of service via a crafted app. It is related to the lack of protection for service data in the Ma...

PT-2016-2075

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.3.2 Description The issue is caused by a buffer overflow in the Accessibility component of the iOS operating system. This can be exploited by a remote attacker using a specially crafted app to gain access to...

CVE-2016-1790: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Accessibility component in Apple iOS before 9.3.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2016-1791: Exposure of Sensitive Information to an Unauthorized Actor

The AMD subsystem in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2016-1796: Exposure of Sensitive Information to an Unauthorized Actor

Apple Type Services ATS in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information or cause a denial of service out-of-bounds memory access via a crafted app...

PT-2016-2074

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.5 Description The issue is related to the AMD subsystem in the operating system, which lacks protection of internal data. This can be exploited by a remote attacker using a specially crafted application to...

FreeBSD atkbd Module Buffer Overflow Vulnerability

FreeBSD is a set of Unix-like free operating systems in the FreeBSD project run by the Core Team team, and is an important branch of Unix-like development through BSD, 386BSD and 4.4BSD. atkbd is one of the driver modules provided for accessing to an AT84 keyboard or connecting to an AT Enhanced...

Symantec / Norton AntiVirus - ASPack Remote Heap/Pool Memory Corruption

Exploit for multiple platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=820 When parsing executables packed by an early version of aspack, a buffer overflow can occur in the core Symantec Antivirus Engine used in most Symantec and Norton branded...

FreeBSD -- Incorrect argument handling in sendmsg(2)

Problem Description: Incorrect argument handling in the socket code allows malicious local user to overwrite large portion of the kernel memory. Impact: Malicious local user may crash kernel or execute arbitrary code in the kernel, potentially gaining superuser privileges...

FreeBSD -- Buffer overflow in keyboard driver

Problem Description: Incorrect signedness comparison in the ioctl2 handler allows a malicious local user to overwrite a portion of the kernel memory. Impact: A local user may crash the kernel, read a portion of kernel memory and execute arbitrary code in kernel context. The result of executing an...

Linux kernel denial of service vulnerability (CNVD-2016-03199)

Linux kernel is an open source operating system. The Linux kernel 'fillv4l2buffer' function fails to properly validate the number of 'planes', allowing a local attacker to exploit this vulnerability to overwrite kernel memory and conduct denial of service attacks...

PT-2016-7431

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5.4 Description A race condition exists in the environ read function, allowing local users to obtain sensitive information from kernel memory. This occurs when reading a /proc//environ file during a process-set...

Microsoft Windows DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Microsoft Windows DirectX graphics kernel subsystem dxgkrnl.sys, which arises from a program that fails to properly handle objects in memory and...

Microsoft Windows HVCI Security Bypass Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A security bypass vulnerability exists in Microsoft Windows 10 Gold and 1511, which stems from a program failing to properly allow certain kernel-mode pages to be marked as Read, Write, and Execute RWX....

Linux kernel restricted use write vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the drivers/infiniband stack using the insecure 'write' function to replace the 'bi-directional ioctl '...

CVE-2016-2117

The atl2probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data...

DEBIAN-CVE-2016-2117

The atl2probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data...

CVE-2016-2117

The atl2probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data...

UBUNTU-CVE-2015-8019

The skbcopyandcsumdatagramiovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not accept a length argument, which allows local users to cause a denial of service memory corruption or possibly have unspecified other impact via a write system call followed by a recvms...