Google Nexus NVIDIA Video Driver Local Elevation of Privilege Vulnerability (CNVD-2016-12237)

Android on Nexus 9 is a set of open source operating system running on Nexus 9 Tablet PC and based on Linux, which is jointly developed by Google and the Open Handheld Alliance OHA for short.NVIDIA Bideo Driver is an NVIDIA Video Driver used in it. A local elevation of privilege vulnerability...

Google Android kernel performance subsystem elevation of privilege vulnerability (CNVD-2016-12173)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which the Kernel Performance Subsystem is a kernel performance component. The kernel performance subsystem in Android is vulnerable to a power lifting vulnerability. The...

Google Android Synaptics Touchscreen Driver Elevation of Privilege Vulnerability (CNVD-2016-12178)

Android on Nexus 9 and Android One is a Linux-based open source operating system for Nexus 9 and Android One smart devices developed by Google Inc. and the Open Handheld Alliance OHA. Synaptics Touchscreen Driver is one of the touchscreen drivers. An elevation of privilege vulnerability exists in...

Google Android MediaTek Driver Elevation of Privilege Vulnerability (CNVD-2016-12188)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and MediaTek Driver is a MediaTek driver component used in one of MediaTek's devices. An elevation of privilege vulnerability exists in the MediaTek Driver in versions of Android...

MariaDB 10.1.0 < 10.1.18 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.18. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.18 advisory. - Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before...

Apache Tomcat Local Elevation of Privilege Vulnerability (CNVD-2016-12018)

Apache Tomcat is the United States Apache Apache Software Foundation under the Jakarta project of a lightweight Web application server, which is mainly used for the development and debugging of JSP programs for small and medium-sized systems. A local elevation of privilege vulnerability exists in...

DiskBoss Enterprise Server <= 7.4.28 GET Buffer Overflow Vulnerability - Windows

DiskBoss Enterprise is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

BitUnmap: Attacking Android Ashmem

Posted by Gal Beniamini, Project Zero The law of leaky abstractions states that “all non-trivial abstractions, to some degree, are leaky”. In this blog post we’ll explore the ashmem shared memory interface provided by Android and see how false assumptions about its internal operation can result i...

PT-2016-3195

Name of the Vulnerable Software and Affected Versions IBM J9 VM affected versions not specified Oracle Java SE affected versions not specified Description The issue is related to a flaw in the class verifier of the IBM J9 VM, which is associated with inadequate access control. This flaw can be...

PT-2016-3188

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an elevation of privilege vulnerability in the MediaTek soc driver, which could allow a remote attacker to elevate their privileges. Recommendations For Android kernel, apply the necessary...

Privilege elevation vulnerability in TrustZone driver for some Huawei phones

Huawei P9, P9 Lite, P8 Lite are Huawei smartphones. An elevation of privilege vulnerability exists in the TrustZone driver of some Huawei phones. An attacker may trick users into installing a malicious application, and the application can exploit the vulnerability to send specific parameters to t...

CVE-2016-6730

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

CVE-2016-6717

An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue ...

CVE-2016-6716

An elevation of privilege vulnerability in the AOSP Launcher in Android 7.0 before 2016-11-01 could allow a local malicious application to create shortcuts that have elevated privileges without the user's consent. This issue is rated as Moderate because it is a local bypass of user interaction...

UBUNTU-CVE-2016-6734

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

CVE-2016-6732

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...

CVE-2016-6708

An elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local malicious user to bypass the security prompt of your work profile in Multi-Window mode. This issue is rated as High because it is a local bypass of user interaction requirements for any developer or...

UBUNTU-CVE-2016-6718

An elevation of privilege vulnerability in the Account Manager Service in Android 7.0 before 2016-11-01 could enable a local malicious application to retrieve sensitive information without user interaction. This issue is rated as Moderate because it is a local bypass of user interaction...

CVE-2016-6716

An elevation of privilege vulnerability in the AOSP Launcher in Android 7.0 before 2016-11-01 could allow a local malicious application to create shortcuts that have elevated privileges without the user's consent. This issue is rated as Moderate because it is a local bypass of user interaction...

CVE-2016-6708

An elevation of privilege in the System UI in Android 7.0 before 2016-11-01 could enable a local malicious user to bypass the security prompt of your work profile in Multi-Window mode. This issue is rated as High because it is a local bypass of user interaction requirements for any developer or...