The vulnerability of the Accessibility Framework component of the Mac OS X operating system allows a perpetrator to execute arbitrary code with system privileges or disclose protected information.

The vulnerability of the Accessibility Framework component in the Mac OS X operating system is related to insufficient access control. Exploiting this vulnerability allows an attacker to execute arbitrary code with system privileges or disclose sensitive information through a specially created...

Denial of Service Vulnerability in Multiple Huawei Phones

Huawei Mate 8 and others are smartphone products of the Chinese company Huawei Huawei. A denial of service vulnerability exists in several Huawei phones due to mishandling of malicious parameters. An attacker launches an attack by inducing a user to install a malicious APK and pre-install an...

Information disclosure

During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes, which in...

CVE-2017-17172

Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege escalation vulnerability. An authenticated, local attacker can crafts malformed packets after tricking a user to install a malicious application and exploit this vulnerability when in the exception handlin...

Privilege escalation

Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege escalation vulnerability. An authenticated, local attacker can crafts malformed packets after tricking a user to install a malicious application and exploit this vulnerability when in the exception handlin...

CVE-2017-17173

Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.356C00 has an arbitrary memory free vulnerability. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter t...

CVE-2017-17173

The CVE-2017-17173 entry concerns Huawei Mate 9 Pro devices with older GPU driver versions (pre-LON-AL00B 8.0.0.356(C00)) where insufficient parameter verification in the GPU driver allows an attacker to trigger arbitrary kernel memory release via a crafted parameter. This could lead to a phone c...

Security Advisory - Privilege Escalation Vulnerability in Some Huawei Smart Phones

Some Huawei smart phones has a privilege escalation vulnerability. An authenticated, local attacker can crafts malformed packets after tricking a user to install a malicious application and exploit this vulnerability when in the exception handling process. Successful exploitation may cause the...

Security Advisory - Arbitrary Memory Free Vulnerability in GPU Driver of Some Huawei Smart Phones

There is an arbitrary memory free vulnerability in GPU driver of some Huawei smart phones due to insufficient parameters verification. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to driver to release special kernel memory...

CVE-2017-5397

The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious application or tools with write access to the file system to replace files used by Firefox with their own...

Code injection

A previously installed malicious Android application which defines a specific signature-level permissions used by Firefox can access API keys meant for Firefox only. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects...

CVE-2017-5397

The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This allows for the possibility of an installed malicious application or tools with write access to the file system to replace files used by Firefox with their own...

CVE-2016-5299

A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for Firefox only. Note: This issue only affects Firefox for Android. Other versions and operating systems are unaffected. This vulnerability affects Firefox 50...

Apple iOS Buffer Overflow Vulnerability (CNVD-2018-12190)

Apple iOS is an operating system for mobile devices developed by Apple Inc. Bluetooth is one of the components of Bluetooth. A security vulnerability exists in the Bluetooth component of Apple iOS prior to version 11.4. The vulnerability can be exploited by an attacker to gain elevated privileges...

Design/Logic Flaw

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with R...

CVE-2018-7901

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with R...

CVE-2018-7901

RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart phones with software versions earlier than 8.0.0.129 has a remote control vulnerability. An attacker can trick a user to install a malicious application. When the application connects with R...

Huawei P9 Lite Inputhub Driver Buffer Overflow Vulnerability

Huawei P9 Lite is a smartphone product from Chinese company Huawei Huawei. The Huawei P9 Lite Inputhub driver suffers from a buffer overflow vulnerability that can cause the phone to reboot by an attacker by tricking the user into installing a malicious application, which sends specific parameter...

Apple macOS High Sierra Installer Information Disclosure Vulnerability

Apple macOS High Sierra is a suite of specialized operating systems developed for Mac computers by Apple.Installer is one of the applications used to extract and install files from .pkg packages. A security vulnerability exists in the Installer component of Apple macOS High Sierra versions prior ...

Google Android Framework Information Disclosure Vulnerability (CNVD-2018-07700)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An information disclosure vulnerability exists in the Framework component of Google Android 8.0, 8.1. The vulnerability stems from the program's failure to properly detec...