Privilege escalation

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

CVE-2016-3239

The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via vectors involving filesystem write operations, aka...

CVE-2016-3272

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles page-fault system calls, which allows local users to obtain sensitive information from an arbitrary process via a crafted application, aka "Windows Kernel Information...

CVE-2016-4831

Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2016-4831

Untrusted search path vulnerability in LINE and LINE Installer 4.7.0 and earlier on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2016-3760

Bluetooth in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows local users to gain privileges by establishing a pairing that remains present during a session of the primary user, aka internal bug 27410683...

CVE-2016-0252

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

Code injection

IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via unspecified vectors...

CVE-2016-0271

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors...

CVE-2016-0287

CVE-2016-0287 (IBM i Access for Windows, Release 7.1) is a local information-disclosure vulnerability where a local attacker could obtain IBM i user passwords from the Windows registry via unspecified vectors. The IBM advisory confirms affected product/version and notes the issue affects IBM i Ac...

CVE-2016-0252

IBM Control Center and Sterling Control Center are affected by CVE-2016-0252. Affected: IBM Control Center 5.4.0–5.4.2.1 iFix08 and 6.0.0.0–6.0.0.1 iFix05. Root cause: vulnerability allows a local attacker to decrypt the master key under certain conditions, potentially enabling decryption of appl...

CVE-2016-0271: Undefined Security Weakness

The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS session or an HTTP session, which allows local users to obtain root access to arbitrary agents via unspecified vectors...

The vulnerability of the Java Platform software platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Java SE software platform allows local users to compromise the confidentiality, integrity, and accessibility of data by using the Hotspot sub-component...

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.

The vulnerability exists in the devifconf function in the net/socket.c kernel of Linux, due to the lack of initialization for certain structures. Exploiting this vulnerability allows local users to access confidential information from the kernel’s stack memory through a specially crafted...

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.

A vulnerability exists in the lliucligetname function in the Linux kernel’s net/llc/afllc.c file, due to incorrect return values under certain circumstances. Exploiting this vulnerability allows local users to access confidential information from the kernel’s stack memory, using a specially craft...

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s stack memory.

The vulnerability exists in the Linux kernel’s Bluetooth protocol stack due to improper initialization of certain structures. Exploiting this vulnerability allows local users to access confidential information from the kernel’s stack memory by using a specially crafted application that utilizes...

The vulnerability of the Linux operating system allows a malicious individual to gain access to input/output statistics.

The vulnerability in the kernel/taskstats.c module of Linux allows local users to access input/output statistics by sending the taskstats command via the netlink socket. For example, a malicious actor can use this vulnerability to obtain information about the length of another user’s password...

The vulnerability of the Linux operating system, which allows a malicious individual to trigger a service failure or increase their privileges.

Local users can trigger a service failure or increase their privileges through the system call IOCQETHADPSETSNMPCONTROL ioctl...

The vulnerability of the Linux operating system allows a malicious individual to gain access to confidential information from the kernel’s memory.

The vulnerability exists in the Linux kernel’s net/xfrm/xfrmuser.c file, due to the lack of initialization for certain structures. Exploiting this vulnerability allows local users to access confidential information from the kernel’s memory, using the privileged CAPNETADMIN privilege...