CVE-2018-10902: Use After Free

It was found that the raw midi kernel driver does not protect against concurrent access which leads to a double realloc double free in sndrawmidiinputparams and sndrawmidioutputstatus which are part of sndrawmidiioctl handler in rawmidi.c file. A malicious local attacker could possibly use this f...

BIOS Boots What? Finding Evil in Boot Code at Scale!

The second issue is that reverse engineering all boot records is impractical. Given the job of determining if a single system is infected with a bootkit, a malware analyst could acquire a disk image and then reverse engineer the boot bytes to determine if anything malicious is present in the boot...

KingCloud Antivirus v2.4.2.39 Personal Edition hookbody.sys driver has a denial of service vulnerability

KingCloud Antivirus is a next-generation artificial intelligence antivirus software for personal end devices launched by Tatsunobuilder. hookbody.sys is a kernel mode driver in KingCloud Personal Antivirus. A denial of service vulnerability exists in the hookbody.sys driver of KingCloud Antivirus...

CVE-2018-2926

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NVIDIA-GFX Kernel driver. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via ISCSI to compromise Solaris. Successful attac...

CVE-2018-2926

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NVIDIA-GFX Kernel driver. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via ISCSI to compromise Solaris. Successful attac...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NVIDIA-GFX Kernel driver. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via ISCSI to compromise Solaris. Successful attac...

CVE-2018-2926

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NVIDIA-GFX Kernel driver. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via ISCSI to compromise Solaris. Successful attac...

CVE-2018-2926

CVE-2018-2926 affects Oracle Solaris 11.3 (NVIDIA-GFX Kernel driver). A low-privileged, network-based attacker (ISCSI) can cause a hang or crash (DoS) and unauthorized read/update/delete of Solaris data. The NVIDIA-GFX subcomponent is the root cause; CVSS 3.0 base score is 7.6. Patch remediation ...

CVE-2018-2926: Undefined Security Weakness

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: NVIDIA-GFX Kernel driver. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via ISCSI to compromise Solaris. Successful attac...

PT-2018-1438

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite subcomponent: NVIDIA-GFX Kernel driver version 11.3 Description The issue is related to inadequate access control in the NVIDIA-GFX Kernel driver component of the Solaris operating system. It allows a...

Denial of Service Vulnerability in NSecKrnl32 Driver of Wei-Eye Computerized Supervisory System of Shandong Anzai Information Technology Co.

PowerEye Computer Supervision System is a professional company computer monitoring and LAN monitoring software. It monitors computer screens and also manages users' online behavior. The NSecKrnl32 driver of Shandong Anzai Information Technology Co., Ltd. has a denial of service vulnerability that...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2018-13364)

Microsoft Windows 7, etc. are operating systems released by Microsoft Corporation in the U.S. Microsoft Windows 7 is a set of operating systems for personal computers.Windows Server 2012 R2 is a set of server operating systems. A privileged access vulnerability exists in Microsoft Windows, which...

Fair Smart Antivirus 8 ffsmon.sys Driver Has Denial of Service Vulnerability

Fair Intelligent Antivirus 8 is an antivirus program from Beijing FairShield Technology Co. ffsmon.sys is a kernel mode driver in Fair Intelligent Antivirus 8. A denial of service vulnerability exists in the ffsmon.sys driver in Fair Smart Antivirus 8 V8.1.5.6709 and V8.1.7.6865. An attacker can...

Fair Smart Antivirus 8 filppd.sys Driver Has Denial of Service Vulnerability

Fil Smart Antivirus 8 is an antivirus program from Beijing Fil Shield Technology Co. filppd.sys is a kernel mode driver in Fil Smart Antivirus 8. A denial of service vulnerability exists in the filppd.sys driver in Fair Smart Antivirus 8 V8.1.5.6109 and V8.1.7.6865. An attacker can exploit the...

CVE-2018-8142

A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-1035...

Security feature bypass

A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-1035...

CVE-2018-8142

A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-1035...

CVE-2018-8142

CVE-2018-8142 describes a Windows local security feature bypass where Windows incorrectly validates kernel driver signatures, allowing loading of improperly signed drivers. Affected products include Windows 10 and Windows Server 2016 (and related Windows 10/server versions). The root cause is imp...

CVE-2018-8142

A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-1035...

CVE-2018-8142: Undefined Security Weakness

A security feature bypass exists when Windows incorrectly validates kernel driver signatures, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-1035...