CVE-2017-0518

An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android...

UBUNTU-CVE-2017-0510

An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

UBUNTU-CVE-2017-0500

An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver, could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical...

CVE-2017-0463

An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

PT-2017-1387

Name of the Vulnerable Software and Affected Versions NVIDIA GPU driver versions prior to the fixed version Description The issue is related to insufficient access control in the NVIDIA GPU driver for the Android operating system, allowing a remote attacker to launch an application with the...

PT-2017-1403

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to insufficient access control in the MediaTek APK of the Android operating system. It allows a remote attacker to execute arbitrary code in the context of a privileged...

PT-2017-1727

Name of the Vulnerable Software and Affected Versions OpenBSD versions 5.8 through 5.9 Description The issue is caused by an integer overflow in the amap alloc1 function, which allows local users to execute arbitrary code with kernel privileges by providing a large size value. This can be exploit...

CVE-2016-6241: Integer Overflow or Wraparound

Integer overflow in the amapalloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large size value...

Amazon Kindle Setup DLL Load Native Code Execution Vulnerability

Amazon Kindle Setup is a set of e-book reader installation applications for the Android-based platform from Amazon USA. A local arbitrary code execution vulnerability exists in Amazon Kindle Setup due to the program failing to filter user-submitted input. A local attacker could exploit the...

CVE-2016-4669

An issue was discovered in certain Apple products. iOS before 10.1 is affected. macOS before 10.12.1 is affected. tvOS before 10.0.1 is affected. watchOS before 3.1 is affected. The issue involves the "Kernel" component. It allows local users to execute arbitrary code in a privileged context or...

CVE-2017-0435

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0433

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android...

CVE-2017-0442

An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-8480

An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process...

UBUNTU-CVE-2017-0427

An elevation of privilege vulnerability in the kernel file system could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

PT-2017-2397

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2 through 7.1.1 Description An elevation of privilege issue in the Framework APIs could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue could be used to...

CVE-2016-5985

The IBM Tivoli Storage Manager IBM Spectrum Protect AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash...

CVE-2016-6167

Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 UxTheme.dll or 2 ntmarta.dll file in the current working directory...

PT-2017-9540

Name of the Vulnerable Software and Affected Versions Lenovo Edge and Lenovo Slim USB Keyboard Driver versions prior to 1.21 Description The issue allows local users to execute code with elevated privileges due to an unquoted service path vulnerability. Recommendations For versions prior to 1.21,...

CVE-2016-8225: Unquoted Search Path or Element

Unquoted service path vulnerability in Lenovo Edge and Lenovo Slim USB Keyboard Driver versions earlier than 1.21 allows local users to execute code with elevated privileges...