Apple macOS Sierra Restricted Memory Read Vulnerability (CNVD-2017-08139)

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. A restricted memory read vulnerability exists within Apple macOS Sierra, which can be exploited by remote attackers to build malicious applications that read arbitrary restricted memory...

Apple macOS Sierra Multi-Touch Memory Corruption Vulnerability

Apple macOS is an operating system that runs on Apple's Macintosh line of computers. Apple macOS Sierra Multi-Touch suffers from a memory corruption vulnerability that can be exploited by remote attackers to build malicious apps and elevate privileges...

Apple macOS Sierra Sandbox Bypass Vulnerability

Apple macOS is a set of operating systems that run on Apple's Macintosh line of computers. Apple macOS Sierra suffers from a sandbox bypass vulnerability that can be exploited by remote attackers to build malicious applications and elevate privileges...

Google Android MediaTek Thermal Driver elevation of privilege vulnerability (CNVD-2017-07434)

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in Google Android MediaTek Thermal Driver, which can be exploited by remote attackers to build malicious applications that can be elevated in privilege by inducing users to pars...

Google Android Qualcomm power driver elevation of privilege vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in Google Android Qualcomm power driver, which can be exploited by remote attackers to build malicious applications that can be elevated in privilege by tricking users into...

Google Android MediaTek video driver elevation of privilege vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in Google Android MediaTek video driver, which can be exploited by remote attackers to build malicious applications that can be elevated in privilege by tricking users into...

Google Android Motorola bootloader elevation of privilege vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in the Google Android kernel sound subsystem, which can be exploited by remote attackers to build malicious applications that can be elevated in privilege by inducing users to...

Google Android Framework APIs elevation of privilege vulnerability (CNVD-2017-08230)

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in the Google Android Framework APIs, which can be exploited by remote attackers to build malicious applications, execute arbitrary code, and elevate privileges...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2017-06873)

Google Android is a Linux-based operating system for smartphone devices. A security vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to build malicious applications, execute arbitrary code, and elevate privileges...

Google Android Qualcomm Video Driver elevation of privilege vulnerability (CNVD-2017-07364)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Google Android Qualcomm video driver has a security vulnerability that can be exploited by remote attackers to build malicious applications that can be elevated in privilege by...

Google Android MediaTek touchscreen driver elevation of privilege vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in the Google Android MediaTek touchscreen driver, which can be exploited by remote attackers to build malicious applications that can be elevated in privilege by tricking users...

Warning! Don't Click that Google Docs Link You Just Received in Your Email

Did someone just share a random Google Doc with you? First of all — Do not click on that Google Doc link you might have just received in your email and delete it immediately — even if it's from someone you know. I, my colleagues at The Hacker News, and even people all around the Internet,...

Hackers Can Steal Your Passwords Just by Monitoring SmartPhone Sensors

Do you know how many kinds of sensors your smartphone has inbuilt? And what data they gather about your physical and digital activities? An average smartphone these days is packed with a wide array of sensors such as GPS, Camera, microphone, accelerometer, magnetometer, proximity, gyroscope,...

Divide Between Work, Personal Data on Android Breached

SAN FRANCISCO–Researchers here at the RSA Conference demonstrated Thursday a way a hacker can bypass enterprise mobility management sandboxing tools known as Android for Work that are designed to segregate work and personal data on Android devices. In a proof-of-concept demonstration, researchers...

Google Android Qualcomm Wi-Fi driver elevation of privilege vulnerability (CNVD-2017-01426)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability in the Qualcomm Wi-Fi driver in Android on several Google devices allows remote attackers to exploit the vulnerability to elevate privileges through special...

Google Android kernel file subsystem elevation of privilege vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability in the kernel file subsystem in Android on several Google devices allows remote attackers to exploit the vulnerability to elevate privileges through special...

Google Android Qualcomm sound driver privilege elevation vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability in the Qualcomm sound driver in Android on multiple Google devices allows remote attackers to exploit the vulnerability to elevate privileges through special...

CVE-2016-6759

An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not...

Gooligan Malware Breaches 1 Million Google Accounts

Android malware called Gooligan is being blamed for 1 million breached Google accounts. The malware is still active, according Check Point Software Technologies, and is responsible for an additional 13,000 new breaches of Android devices daily. “We believe that it is the largest Google account...

Google Android Framework APIs Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Framework APIs are one of the API components used to create the framework. An elevation of privilege vulnerability exists in Framework APIs in Android. An attacker can exploit the...