Microsoft Windows Kernel Local Information Disclosure Vulnerability (CNVD-2016-07923)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Secure Kernel Mode is one of the kernel function modules. An information disclosure vulnerability exists in the kernel mode functionality in Microsoft Windows 10 Gold and 1511 versions, which stems fr...

The vulnerability of the Mac OS X operating system allows a perpetrator to trigger a service failure or gain access to protected information.

The vulnerability of the Audio component of the Mac OS X operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to protected information in the kernel memory or cause a service failure reading...

The vulnerability of the iOS operating system allows a perpetrator to trigger a service failure or obtain confidential information.

The vulnerability of the IOAcceleratorFamily component in the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker acting locally to obtain confidential information from the kernel’s memory or trigger a service failure...

The vulnerability of the Mac OS X operating system allows a perpetrator to trigger a service failure, obtain confidential information, or increase their privileges.

The vulnerability of the CoreGraphics component in the Mac OS X operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, acting locally, to obtain confidential information from the kernel’s memory, enhance their privileges, or cause a...

kernel: compat IPT_SO_SET_REPLACE setsockopt

A flaw was discovered in processing setsockopt for 32 bit processes on 64 bit systems. This flaw will allow attackers to alter arbitrary kernel memory when unloading a kernel module. This action is usually restricted to root-privileged users but can also be leveraged if the kernel is compiled wit...

Apple iOS < 10.0.1 Kernel Memory Information Disclosure (Trident)

Binary data appleios1001check.nbin...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2005-1)

This update for the Linux Kernel 3.12.48-5227 fixes several issues. The following security bugs were fixed : - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...

SUSE SLES12 Security Update : kernel (SUSE-SU-2016:2010-1)

This update for the Linux Kernel 3.12.51-5239 fixes several issues. The following security bugs were fixed : - CVE-2016-4470: The keyrejectandlink function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a...

Ubuntu: Security Advisory (USN-3072-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3070-1: Linux kernel vulnerabilities

A missing permission check when settings ACLs was discovered in nfsd. A local user could exploit this flaw to gain access to any file by setting an ACL. CVE-2016-1237 Kangjie Lu discovered an information leak in the Reliable Datagram Sockets RDS implementation in the Linux kernel. A local attacke...

CVE-2016-4655

The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app...

VMware Fusion Guest Privilege Escalation Vulnerability (Aug 2016) - Mac OS X

VMware Fusion is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Player Guest Privilege Escalation Vulnerability (Aug 2016) - Linux

VMware Player is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Workstation Guest Privilege Escalation Vulnerability (Aug 2016) - Windows

VMware Workstation is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Player Guest Privilege Escalation Vulnerability (Aug 2016) - Windows

VMware Player is prone to an important guest privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

AVG Internet Security avgtdix.sys Kernel Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of AVG Internet Security. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of...

Memory corruption due to an unsanitized pointer in the NVIDIA display driver - Lenovo Support US

No description provided...

Memory corruption due to an unsanitized pointer in the NVIDIA display driver

Lenovo Security Advisory: LEN-3313 Potential Impact: Escalation of privileges Severity: Medium Summary: A vulnerability has been found in the NVIDIA driver that could be used to allow a local, non-privileged user to corrupt kernel memory. This could be used to gain local root privileges...

FreeBSD : FreeBSD -- SCTP SCTP_SS_VALUE kernel memory corruption and disclosure (0a5cf6d8-600a-11e6-a6c3-14dae9d210b8)

Due to insufficient validation of the SCTP stream ID, which serves as an array index, a local unprivileged attacker can read or write 16-bits of kernel memory. Impact : An unprivileged process can read or modify 16-bits of memory which belongs to the kernel. This may lead to exposure of sensitive...

FreeBSD : FreeBSD -- ktrace kernel memory disclosure (6e04048b-6007-11e6-a6c3-14dae9d210b8)

Due to an overlooked merge to -STABLE branches, the size for page fault kernel trace entries was set incorrectly. Impact : A user who can enable kernel process tracing could end up reading the contents of kernel memory. Such memory might contain sensitive information, such as portions of the file...