2746 matches found
Apple OS X Kernel Memory Corruption Vulnerability (CNVD-2016-08113)
Apple OS X is a specialized operating system developed by Apple for Mac computers, of which Kernel is a kernel component. A memory corruption vulnerability exists in the Kernel in Apple OS X version 10.11.6, which can be exploited by a specially crafted application to execute arbitrary code with...
Apple OS X Kernel Memory Corruption Vulnerability (CNVD-2016-08114)
Apple iOS, OS X, tvOS, and watchOS are products of Apple Inc. Apple iOS is an operating system for mobile devices; OS X is a specialized operating system for Mac computers; tvOS is an operating system for smart TVs; and watchOS is an operating system for smart watches. Kernel is one of the kernel...
Apple OS X kernel memory corruption vulnerability (CNVD-2016-08100)
Apple OS X is a specialized operating system developed by Apple for Mac computers. kernel is one of the kernel components. A memory corruption vulnerability exists in the kernel in Apple OS X version 10.11.6. A local attacker can exploit this vulnerability to execute arbitrary code with kernel...
macOS < 10.11.5 Multiple Vulnerabilities
Binary data 802004.prm...
Apple iOS Memory Corruption Vulnerability (CNVD-2016-06251)
IOS is an operating system developed by Apple for mobile devices. Apple iOS suffers from a memory corruption vulnerability that can be exploited by an attacker to execute arbitrary code with kernel privileges on the affected system...
kernel: infiniband: Unprivileged process can overwrite kernel memory using rdma_ucm.ko
A flaw was found in the way certain interfaces of the Linux kernel's Infiniband subsystem used write as bi-directional ioctl replacement, which could lead to insufficient memory security checks when being invoked using the splice system call. A local unprivileged user on a system with either...
Apple Launches Bug Bounty with Maximum $200,000 Reward
LAS VEGAS—Apple closed out Black Hat today with a long-awaited announcement that next month it will launch a bug bounty. The Apple Security Bounty will be an invitation-only program, open to two dozen researchers at the outset, said Ivan Krstic, head of security engineering and architecture. The...
About the security content of iOS 9.3.4
About the security content of iOS 9.3.4 This document describes the security content of iOS 9.3.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Google Nexus elevation of privilege vulnerability (CNVD-2016-06073)
Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code using kernel wide elevated privileges...
Google Nexus elevation of privilege vulnerability (CNVD-2016-06071)
Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code using kernel wide elevated privileges...
Google Nexus elevation of privilege vulnerability (CNVD-2016-06072)
Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code using kernel wide elevated privileges...
Google Nexus elevation of privilege vulnerability (CNVD-2016-06074)
Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code using kernel wide elevated privileges...
Google Nexus elevation of privilege vulnerability (CNVD-2016-06077)
Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability, which can be exploited by an attacker to elevate privileges and execute arbitrary code within the scope of using the kernel...
Google Nexus elevation of privilege vulnerability (CNVD-2016-06075)
Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code using kernel wide elevated privileges...
Apple iOS/tvOS/watchOS Local Lift Vulnerability
Apple iOS, tvOS, and watchOS are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; tvOS is a smart TV operating system; and watchOS is a smart watch operating system. A local exploit exists in Apple iOS/tvOS/watchOS. A local attacker can exploit this...
Apple OS X IOPMrootDomain Memory Corruption Privilege Escalation Vulnerability
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Apple OS X. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within IOPMrootDomain. By...
Apple Fixes Vulnerabilities Across OS X, iOS, Safari
Apple fixed dozens of vulnerabilities in its software on Monday, including 60 vulnerabilities in its operating system, OS X, and 43 in its mobile operating system, iOS. The OS X update graduates the desktop and server operating system to OS X El Capitan v10.11.6 and applies to anyone running OS X...
About the security content of OS X El Capitan v10.11.6 and Security Update 2016-004
About the security content of OS X El Capitan v10.11.6 and Security Update 2016-004 This document describes the security content of OS X El Capitan v10.11.6 and Security Update 2016-004. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm securi...
Linux kernel 'compat_setsockopt()' function arbitrary code execution vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the IPTSOSETREPLACE parameter in the 'compatsetsockopt' function of the Linux kernel. A local attacker could exploit this vulnerability to...