Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2016-00254)

Microsoft Windows is a popular operating system. Microsoft Windows fails to properly load DLL files, allowing attackers to exploit the vulnerability to build special files that can be tricked into being parsed by users to elevate privileges...

Fortinet FortiClient Linux SSLVPN build elevation of privilege vulnerability

Fortinet FortiClient Linux SSLVPN is a Linux-based VPN client for connecting to Fortinet devices. An elevation of privilege vulnerability exists in versions prior to Fortinet FortiClient Linux SSLVPN build 2313, which allows local users to gain privileges via the assistant/sabloid etuid program...

CVE-2016-0006

The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which allows local users to gain privileges via a...

CVE-2016-0007

The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which allows local users to gain privileges via a...

CVE-2016-0006

CVE-2016-0006 is a local privilege-escalation vulnerability in the Windows sandbox implementation where reparse points are mishandled. A crafted application can escalate privileges on affected systems by exploiting this flaw. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2...

CVE-2016-0005

Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2016-0006: Undefined Security Weakness

The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which allows local users to gain privileges via a...

CVE-2016-0007: Undefined Security Weakness

The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which allows local users to gain privileges via a...

Microsoft Windows Privilege Elevation Vulnerabilities (3124605)

This host is missing an important security update according to Microsoft Bulletin MS16-008 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2016-1048

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold and 8.1 Microsoft Windows 10 Gold an...

MS16-008: Description of the security update for Windows Kernel: January 12, 2016

None None...

PT-2016-1058

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11.1 Description The issue is caused by authentication errors during new sessions. It may allow a local attacker to elevate their privileges. The estimated number of potentially affected devices worldwide is not...

Android Trustzone elevation of privilege vulnerability, CVE-2 0 1 5-6 6 3 9-a vulnerability warning-the black bar safety net

Affected system: Android Android Description: CVECAN ID: CVE-2 0 1 5-6 6 3 9 Android is a Linux-based open kernel Phoneoperating system. Android 5.1.1 LMY49F before 5. x version, 2016-01-0 1 before the 6. 0 version, Trustzone applications on the realization of the presence of security...

PT-2016-1010

Name of the Vulnerable Software and Affected Versions Imagination Technologies driver versions prior to 5.1.1 LMY49F Imagination Technologies driver versions prior to 2016-01-01 in Android 6.0 Description The issue is related to insufficient access control in the Imagination Technologies driver i...

Lenovo Solution Center 'LSCTaskService' Local Lift Vulnerability

Lenovo Solution Center is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. A local elevation of privilege vulnerability exists in Lenovo Solution Center. A local attacker can exploit...

PT-2015-2872

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 43.0 Description The issue is related to insufficient access restrictions to certain functions in the browser. It may allow a remote attacker to elevate privileges, conduct cross-site scripting XSS attacks, or...

ABRT/sosreport privilege elevation

Added: 12/14/2015 CVE: CVE-2015-5287 Background The Automatic Bug Reporting Tool ABRT is an application that runs as a daemon on some Linux systems. ABRT collects relevant crash data when another application crashes and can report it to a relevant issue tracker for analysis. After saving some...

ABRT/sosreport privilege elevation

Added: 12/14/2015 CVE: CVE-2015-5287 Background The Automatic Bug Reporting Tool ABRT is an application that runs as a daemon on some Linux systems. ABRT collects relevant crash data when another application crashes and can report it to a relevant issue tracker for analysis. After saving some...

ABRT/sosreport privilege elevation

Added: 12/14/2015 CVE: CVE-2015-5287 Background The Automatic Bug Reporting Tool ABRT is an application that runs as a daemon on some Linux systems. ABRT collects relevant crash data when another application crashes and can report it to a relevant issue tracker for analysis. After saving some...

ABRT/sosreport privilege elevation

Added: 12/14/2015 CVE: CVE-2015-5287 Background The Automatic Bug Reporting Tool ABRT is an application that runs as a daemon on some Linux systems. ABRT collects relevant crash data when another application crashes and can report it to a relevant issue tracker for analysis. After saving some...