Linux Kernel 'btrfs/ctree.c' Local Elevation of Privilege Vulnerability

Linux Kernel is an open source operating system. A local elevation of privilege vulnerability exists in Linux Kernel 'btrfs/ctree.c', which can be exploited by an attacker to gain elevation of privilege...

CVE-2017-1468: Undefined Security Weakness

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in installation directories. IBM X-force ID: 128467...

chromium-browser: out-of-bounds write in ppapi

Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page...

PT-2017-16299

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 60.0.3112.78 Description The issue is related to insufficient validation of untrusted input in PPAPI Plugins, which could allow a remote attacker to potentially gain privilege elevation. This can be achieved via...

CVE-2017-5099

Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to potentially gain privilege elevation via a crafted HTML page...

PT-2017-17287

Name of the Vulnerable Software and Affected Versions Cisco Web Security Appliance WSA versions 10.0 through 10.1.0-204 Cisco Web Security Appliance WSA version 10.1.0-204 Description A vulnerability in the web interface of the Cisco Web Security Appliance could allow an authenticated, remote...

CVE-2017-9811

The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 version 8.0.4.312. By abusing the quarantine read and write operations, it is possible to elevate the privileges to root...

CVE-2017-10603: XML Injection (aka Blind XPath Injection)

An XML injection vulnerability in Junos OS CLI can allow a locally authenticated user to elevate privileges and run arbitrary commands as the root user. This issue was found during internal product security testing. Affected releases are Juniper Networks Junos OS 15.1X53 prior to 15.1X53-D47, 15....

PT-2017-3021

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 8.0 Description The issue is related to insufficient access control in the Android framework component GateKeeperResponse, allowing a remote attacker to potentially elevate their privileges. Recommendations For...

PT-2017-11400

Name of the Vulnerable Software and Affected Versions Junos OS versions prior to 15.1X53-D47 Junos OS versions 15.1 prior to 15.1R3 Description An XML injection issue in the Junos OS CLI allows a locally authenticated user to elevate privileges and execute arbitrary commands as the root user. Thi...

McAfee Advanced Threat Defense Elevation of Privilege Vulnerability

McAfee Advanced Threat Defense ATD is a suite of threat detection and defense solutions from the U.S.-based company McAfee McAfee. The solution provides malware analysis, shared threat intelligence, and isolation of compromised systems. The Web interface in McAfee ATD is vulnerable to a power...

PT-2017-2847

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to insufficient access control in the libmediaplayerservice library of the Android Media Framework. It allows a remote attacker to elevat...

Microsoft Windows Kernel Local Elevation of Privilege Vulnerability (CNVD-2017-22654)

Microsoft Windows is the popular computer operating system. A security vulnerability in the Microsoft Windows kernel's handling of memory objects allows an attacker to exploit the vulnerability to submit special requests and elevate privileges...

PT-2017-2864

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description The issue is related to insufficient access control in the windowmanager library of the Android framework. It allows a remote attacker to elevate their privileges...

CVE-2017-8563

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Kerberos falling back to NT LAN Manager NTLM Authentication...

CVE-2017-8566

Microsoft Windows 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows Input Method Editor IME improperly handling parameters in a method of a DCOM class, aka "Windows IME Elevation of Privilege Vulnerability"...

CVE-2017-8569

Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...

CVE-2017-8559

Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access OWA handles web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability...

Description of the security update for Microsoft Exchange: July 11, 2017

None None...

Windows Search Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full...