CVE-2017-18213

In Exponent CMS before 2.4.1 Patch 6, certain admin users can elevate their privileges...

ABB MicroSCADA Installation Elevation of Privilege Vulnerability

ABB MicroSCADA is a suite of substation monitoring and control software from ABB Switzerland, developed specifically for power transmission and distribution systems. The software includes a human-machine interface MMI and flexible application engineering tools, and provides monitoring, event...

CVE-2014-10070

Mode C: CVE-2014-10070 affects zsh prior to 5.0.7, where environment-imported initial values of integer variables may be evaluated instead of literals when zsh is invoked in privilege-elevation contexts with unsanitized env (e.g., sudo with env_reset disabled). This can enable local privilege esc...

Google Android Kernel Easel Elevation of Privilege Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, of which the Kernel Easel driver is a kernel driver. Kernel Easel driver is one of the kernel drivers. A privilege elevati...

Microsoft Windows Common Log File System Driver Elevation of Privilege Vulnerability (CNVD-2018-05736)

Microsoft Windows is a series of operating systems released by Microsoft.Windows Common Log File SystemCLFS driver is one of the common log file system drivers. A privilege vulnerability exists in the Microsoft Windows CLFS driver, which arises from the program's failure to properly handle object...

Microsoft Windows Storage Services Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Windows Storage Services is one of the system storage services. An elevation of privilege vulnerability exists in Microsoft Windows Storage Services, which arises from the program's failure to properl...

IBM Client Application Access and Notes Elevation of Privilege Vulnerability

IBM Client Application Access and IBM Notes are both products of IBM Corporation in the U.S. IBM Client Application Access is a set of tools for accessing local applications.IBM Notes is a set of collaborative office software. An elevation of privilege vulnerability exists in IBM Client Applicati...

CVE-2018-1417

Under certain circumstances, a flaw in the J9 JVM IBM SDK, Java Technology Edition 7.1 and 8.0 allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823...

Code injection

Under certain circumstances, a flaw in the J9 JVM IBM SDK, Java Technology Edition 7.1 and 8.0 allows untrusted code running under a security manager to elevate its privileges. IBM X-Force ID: 138823...

CVE-2018-1417

CVE-2018-1417 : A flaw in the IBM J9 VM within IBM SDK Java Technology Edition 7.1 and 8.0 can allow untrusted code running under a security manager to elevate privileges. IBM X-Force ID: 138823. CVSSv3 base score 8.1 (HIGH) with network attack vector, no authentication, and all impact metrics at...

CVE-2016-8534

A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2016-8534

A remote privilege elevation vulnerability in HPE Matrix Operating Environment version 7.6 was found...

CVE-2018-0820

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are...

CVE-2018-0756

The Windows kernel in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "Windows Kernel Elevation of Privilege Vulnerability". This CVE is unique from...

CVE-2017-13273

In xtqtaguid.c, there is a race condition due to insufficient locking. This could lead to local elevation of privileges with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-65853158...

SUSE-SU-2018:0437-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information t...

PT-2018-9101 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to how objects in memory are handled, allowing an elevation of privilege. This could potentially affect the system. Recommendations: At the moment, there is no...

Google Android NVIDIA component libnvmmlite_audio.so file elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the NVIDIA libnvmmliteaudio.so file in Android. An attacker can exploit this vulnerability to execute code write across boundarie...

Improper access control

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate...

SUPERAntiSpyware Professional Trial SASKUTIL.SYS Driver Elevation of Privilege Vulnerability

SUPERAntiSpyware Professional Trial is a suite of antivirus tools mainly used for scanning for spyware from Support.com, USA.SASKUTIL.SYS driver is one of the drivers that communicates with the hardware. A security vulnerability exists in the SASKUTIL.SYS driver in SUPERAntiSpyware Professional...