6600 matches found
CVE-2016-3239
The CVE-2016-3239 issue is a local privilege-escalation vulnerability in the Windows Print Spooler component. Affected systems include Windows Vista/7/8.1/10 and corresponding Server SKUs where the Print Spooler can write to the filesystem, enabling local attackers to gain elevated privileges. Mi...
CVE-2016-3254
CVE-2016-3254 is a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista to Windows 10) where a crafted user-mode application can cause a kernel-mode elevation via Windows kernel drivers. The description specifies local privileges escalation but the documents do n...
Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2016-04746)
Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel-mode drivers is one of the kernel driver management software. An elevation of privilege vulnerability exists in the kernel-mode driver in Microsoft Windows Server 2012 and Windows 10...
Android Qualcomm Component Elevation of Privilege Vulnerability
Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies that use Qualcomm components for their devices. Qualcomm is a Qualcomm...
Microsoft Kernel-Mode Drivers Multiple Privilege Elevation Vulnerabilities (3171481)
This host is missing an important security update according to Microsoft Bulletin MS16-090. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2016-3239: Undefined Security Weakness
The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via vectors involving filesystem write operations, aka...
MS16-090: Description of the security update for Windows kernel-mode drivers: July 12, 2016
None None...
Perl Local Elevation of Privilege Vulnerability
Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall. A security vulnerability exists in Perl. A local attacker can exploit this vulnerability by supplying specially crafted data to the XSLoader component to gain privileges on the target syst...
Vulnerabilities in the Internet Explorer browser, which allow a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information
Multiple vulnerabilities in Internet Explorer allow attackers to elevate their privileges level. By exploiting these vulnerabilities, attackers cannot execute arbitrary code, but they can use them to exploit other vulnerabilities with elevated privileges e.g., to execute arbitrary code...
Lenovo Solution Center Local Elevation of Privilege Vulnerability
Lenovo Solution Center LSC is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. A local elevation of privilege vulnerability exists in versions prior to LSC 3.3.003. A local attacker...
Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities
Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SYMANTEC-SEPM-MULTIPLE-VULNS.txt + ISR: ApparitionSec Vendor: ================ www.symantec.com Product: =========== SEPM Symantec Endpoint Protection Manager and client v12.1...
Microsoft Windows - Custom Font Disable Policy Bypass
Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=779 Windows: Custom Font Disable Policy Bypass Platform: Windows 10 Only Class: Security Feature Bypass Summary: It’s possible to bypass the ProcessFontDisablePolicy check in win32...
Windows kernel mode drivers privilege elevation vulnerabilities MS16-062)
No description provided by source...
CVE-2016-3219
The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...
CVE-2016-3223: Undefined Security Weakness
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandle LDAP authentication, which allows man-in-the-middle attackers to gain privileges by modifying group-policy update da...
CVE-2016-3221: Undefined Security Weakness
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...
Microsoft Kernel-Mode Drivers Privilege Elevation Vulnerabilities (3164028)
This host is missing an important security update according to Microsoft Bulletin MS16-073. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Web Proxy Auto Discovery (WPAD) Privilege Elevation Vulnerabilities (3165191)
This host is missing an important security update according to Microsoft Bulletin MS16-077. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Oracle Outside in Libraries Elevation of Privilege Vulnerabilities
This security update addresses the following vulnerabilities, which are described in Oracle Critical Patch Update Advisory - January 2016: CVE-2015-6013: Oracle Outside In 8.5.2 WK4 stack buffer overflow CVE-2015-6014: Oracle Outside In 8.5.2 DOC stack buffer overflow CVE-2015-6015: Oracle OIT...