Apple OS X Kernel Information Disclosure Vulnerability

Apple OS X is a specialized operating system developed by Apple for Mac computers. kernel is one of the kernel components. A security vulnerability exists in the debugging interface of the Kernel in Apple OS X 10.10.5 and earlier versions. A local attacker could exploit this vulnerability to obta...

CVE-2015-6927

vzctl before 4.9.4 determines the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container CT root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the...

CVE-2015-6927

vzctl before 4.9.4 determines the virtual environment VE layout based on the presence of root.hdd/DiskDescriptor.xml in the VE private directory, which allows local simfs container CT root users to change the root password for arbitrary ploop containers, as demonstrated by a symlink attack on the...

The vulnerability of the Windows operating system, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the Windows operating system’s kernel is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially crafted application...

Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar (MS15-061)

Microsoft Windows Kernel - Pool Buffer Overflow Drawing Caption Bar MS15-061 Source: https://code.google.com/p/google-security-research/issues/detail?id=321 The PoC triggers a crashes due to a pool buffer overflow while drawing the caption bar of window. The trigger depends on the current window...

CVE-2015-5831

NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows attackers to obtain sensitive memory-layout information via a crafted app...

CVE-2015-5842

CVE-2015-5842 affects Apple’s XNU kernel (macOS/iOS) where an uninitialized kernel data structure could allow a local attacker to determine kernel memory layout. The connected Nessus/NASL entries confirm the root cause as a kernel memory-layout disclosure and note that the issue was mitigated by ...

CVE-2015-5842

XNU in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows local users to obtain sensitive memory-layout information via unknown vectors...

CVE-2015-5834

CVE-2015-5834 involves the IOAcceleratorFamily in iOS prior to version 9. A crafted app could cause a disclosure of the kernel memory layout. The root cause is a memory-disclosure path in IOAcceleratorFamily that was addressed by improved bounds checking. The impact is limited to information expo...

CVE-2015-5831

NetworkExtension in the kernel in Apple iOS before 9 does not properly initialize an unspecified data structure, which allows attackers to obtain sensitive memory-layout information via a crafted app...

Debian Security Advisory DSA 3357-1 (vzctl - security update)

It was discovered that vzctl, a set of control tools for the OpenVZ server virtualisation solution, determined the storage layout of containers based on the presence of an XML file inside the container. An attacker with local root privileges in a simfs-based container could gain control over...

DSA-3357-1 vzctl - security update

Bulletin has no description...

MS15-097: Vulnerabilities in Microsoft Graphics Component Could Allow Remote Code Execution (3089656)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in the Windows Adobe Type Manager Library due to improper handling of specially crafted OpenType fonts. An authenticated, remote attacker...

The vulnerability in the Internet Explorer browser allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism by using a specially crafted website...

QEMU Programmable Interrupt Timer Controller Heap Overflow Exploit

Exploit for multiple platform in category dos / poc Source: https://code.google.com/p/google-security-research/issues/detail?id=419c4 The programmable interrupt timer PIT controller in QEMU does not correctly validate the channel number when performing IO writes to the device controller, allowing...

Apple OS X AppleGraphicsControl Information Disclosure Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A security vulnerability in Apple OS X AppleGraphicsControl allows applications to exploit the vulnerability to obtain kernel memory layout information...

Microsoft Internet Explorer Table Handling Arbitrary Code Execution (CVE-2015-2502)

A vulnerability exists in the way Microsoft Internet Explorer handles the layout cache of tables. This vulnerability can be used to corrupt arbitrary memory and can lead to arbitrary code execution...

Memory corruption

AppleGraphicsControl in Apple OS X before 10.10.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2015-3780

The Bluetooth subsystem in Apple OS X before 10.10.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app...

CVE-2015-3766

The kernel in Apple iOS before 8.4.1 and OS X before 10.10.5 does not properly restrict the machportspaceinfo interface, which allows attackers to obtain sensitive memory-layout information via a crafted app...