PT-2018-5505

Name of the Vulnerable Software and Affected Versions: Android versions 8.0, 8.1 Description: The issue is related to an insecure permissions check in the ServiceManager::add function within the hardware service manager. This could allow an application or service to replace a HAL service with its...

PT-2018-5510

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an out-of-bounds write in the ashmem ioctl function of ashmem.c. This is due to insufficient locking when accessing asma, which could lead to a local elevation of privilege. This enables cod...

Jungo Windriver Local Elevation of Privilege Vulnerability

Jungo WinDriver is a PCI/USB device driver development tool from Jungo Connectivity, Israel. A local elevation of privilege vulnerability exists in Jungo Windriver version 12.5.1. A local attacker can exploit this vulnerability to cause a denial of service buffer overflow or gain system privilege...

PT-2018-5491

Name of the Vulnerable Software and Affected Versions: Android versions 6.0 through 8.1 Description: The issue is related to a possible out-of-bounds write due to a use after free in the onQueueFilled function of SoftAVCDec. This could occur if a bad header causes the decoder to get caught in a...

PT-2018-5511

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an out-of-bounds write in the bootloader due to reading a string without verifying that it's null-terminated. This could lead to a secure boot bypass and a local elevation of privilege,...

PT-2018-5492

Name of the Vulnerable Software and Affected Versions: Android versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to a possible double free in the doGetThumb and getThumbnail functions of MtpServer. This could lead to a local elevation of privilege, enabling code execution as ...

Google Android Ashmem Group Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Ashmem is a memory allocation sharing component. An elevation of privilege vulnerability exists in the Ashmem component in Android. A remote attacker could exploit this...

Microsoft Windows Subsystem for Linux Elevation of Privilege Vulnerability (CNVD-2018-00519)

Microsoft Windows 10 and Windows Server Version 1709 are both products of Microsoft Corporation.Microsoft Windows 10 is a cross-platform operating system for PCs and laptops, tablets, and cell phones.Windows Server Version 1709 is a server operating system. Microsoft Windows 10 is a cross-platfor...

CVE-2018-0788

The Windows Adobe Type Manager Font Driver Atmfd.dll in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 and R2 allows an elevation of privilege vulnerability due to the way objects are handled in memory, aka "OpenType Font Driver Elevation of...

CVE-2018-0748

The Windows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way memory...

HPESBHF03805 rev.24 - Certain HPE products using Microprocessors from Intel, AMD, and ARM, with Speculative Execution, Elevation of Privilege and Information Disclosure (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754)

Potential Security Impact: Local: Disclosure of Information, Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL120 Gen10 Server - prior to 1.3202-01-201816 Feb 2018 HPE ProLiant DL160 Gen10 Server - prior to 1.3202-01-201816 Feb 2018 HPE ProLian...

PT-2018-9051

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Description The issue is related to the way the Windows Kernel API enforces permissions, allowing an elevation of privilege. This could potentially allow attackers to affect the system. Recommendatio...

PT-2018-9069

Name of the Vulnerable Software and Affected Versions: Windows 7 SP1 Windows 8.1 Windows RT 8.1 Windows Server 2008 SP2 Windows Server 2008 R2 SP1 Windows Server 2012 Windows Server 2012 R2 Description: The issue is related to the way objects are handled in memory by the Windows Adobe Type Manage...

PT-2018-1117

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is caused by a heap buffer overflow in the libMtkOmxVdec.so component. This could lead to a remote elevation of privilege, enabling code execution as a privileged process with no additional execution...

CVE-2017-16897: Authentication Bypass by Spoofing

A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign the full SAML response e.g., only signs th...

Vulnerability of the JavaScript ChakraCore kernel, Microsoft Edge and Internet Explorer browsers, caused by operations beyond buffer boundaries in memory, allowing attackers to gain control of the current user’s privileges and execute arbitrary code.

The vulnerability of JavaScript ChakraCore, as well as Microsoft Edge and Internet Explorer browsers, is caused by an operation that goes beyond the buffer boundaries in memory a memory object handling error. Exploiting this vulnerability can allow a remote attacker to gain administrative...

Auth0 passport-wsfed-saml2 elevation of privilege vulnerability

Auth0 passport-wsfed-saml2 library is a set of Auth0 development platform of the United States Auth0 company's tool library . A security vulnerability exists in Auth0 passport-wsfed-saml2 library versions prior to 3.0.5. An attacker can exploit the vulnerability to spoof other users and potential...

Ubiquiti UniFi Video Local Elevation of Privilege Vulnerability

Ubiquiti UniFi Video is a webcam product from Ubiquiti Networks, USA. A local elevation of privilege vulnerability exists in Ubiquiti UniFi Video. A local attacker can exploit this vulnerability to execute arbitrary code with elevated privileges...

Cambium Networks cnPilot Backdoor Access Elevation of Privilege Vulnerability

Cambium Networks cnPilot is a cloud-enabled managed single-band router product from Cambium Networks, USA. A security vulnerability exists in Cambium Networks cnPilot using firmware version 4.3.2-R4 and earlier. An attacker can exploit the vulnerability by accessing the web shell using the...

CVE-2017-14380

In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin compadmin account user could exploit a vulnerability in isigetitrace or isigetprofile maintenance scripts to run any shell script as system root on a cluster in...