CVE-2017-0489

An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1,...

CVE-2017-0306

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2017-0524

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

PT-2017-1459

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in the Qualcomm camera driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel...

PT-2017-1417

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to an elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue driver. This...

PT-2017-1438

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4 through 7.1.1 Description An elevation of privilege issue in the NFC component could allow a proximate attacker to execute arbitrary code within the context of a privileged process. This issue is rated as High because it...

PT-2017-1408

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the MediaTek hardware sensor driver. This could allow a local malicious application to execute arbitrary code within the...

PT-2017-1400

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in the Qualcomm IPA driver, which could allow a local malicious application to execute arbitrary code within the context of t...

PT-2017-1381

Name of the Vulnerable Software and Affected Versions Android versions prior to Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in the NVIDIA GPU driver, which could allow a local malicious application to execute arbitrary code within the context of the...

PT-2017-1401

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description An elevation of privilege issue in the Synaptics touchscreen driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated...

Multiple F5 BIG-IP Products Privilege Enhancement Vulnerability

F5 BIG-IP Analytics and others are products of F5 Corporation in the U.S. F5 BIG-IP Analytics is a suite of Web application performance analytics software. the APM is a suite of solutions that provide secure and unified access to business-critical applications and networks. and the LTM is a local...

CVE-2017-0508

An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing th...

Apple Mac OS X Multiple Vulnerabilities-03 (Feb 2017)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Netgear DGN2200v1/v2/v3/v4 - 'dnslookup.cgi' Remote Command Execution

!/usr/bin/python Provides access to default user account, privileges can be easily elevated by using either: - a kernel exploit ex. memodipper was tested and it worked - by executing /bin/bd suid backdoor present on SOME but not all versions - by manipulating the httpd config files to trick the...

Palo Alto PAN-OS Kernel Vulnerability

A vulnerability exists in the kernel of PAN-OS that may result in an elevation of privilege. This issue is publicly known as Dirty COW. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

Security Advisory - Privilege Elevation Vulnerability Caused by Arbitrary File Upload in Huawei Themes

The Huawei Themes APP in some Huawei products has a privilege elevation vulnerability due to the lack of theme pack check. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of...

PT-2017-1290

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.2 macOS versions prior to 10.12.2 watchOS versions prior to 3.1.3 Description The issue involves the Kernel component and allows local users to gain privileges or cause a denial of service memory corruption via...

PT-2017-1308

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12 Description The issue is related to a sandbox escape in the libxpc component, specifically with the launchctl process, due to insufficient access control. This could allow a local attacker to elevate their...

Pivotal Cloud Foundry Elastic Runtime Elevation of Privilege Vulnerability

Pivotal Cloud Foundry PCF is a set of open source Platform-as-a-Service PaaS cloud computing platforms from U.S.-based Pivotal Software, which provides container scheduling, continuous delivery, and automated service deployment. An elevation of privilege vulnerability exists in Pivotal Cloud...

NVIDIA GPU and GeForce Experience Elevation of Privilege Vulnerability

The NVIDIA GPU and GeForce Experience installer is a set of installation tools from NVIDIA that are used to automatically update the graphics card drivers in the GPU graphics processor. A security vulnerability exists in NVIDIA GPU and GeForce Experience installer, which arises from the program...