CVE-2017-0434

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android...

CVE-2017-0423

An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability in the Bluetooth stack. Product: Android. Versions: 5.0.2, 5.1.1,...

CVE-2017-0435

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

PT-2017-1253

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in the Qualcomm sound driver, which could allow a local malicious application to execute arbitrary code within the context of...

PT-2017-10563

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description An elevation of privilege issue in Bluetooth could allow a nearby attacker to gain access to device documents. This issue is considered moderate severity because it requires the...

PT-2017-1192

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in the HTC touchscreen driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel...

CVE-2017-0412: Time-of-check Time-of-use (TOCTOU) Race Condition

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

PT-2017-2083

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 Description An elevation of privilege issue in the Synaptics touchscreen driver could allow a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated...

PT-2017-1195

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to an elevation of privilege vulnerability in the Realtek sound driver, which could allow a local malicious application to execute arbitrary code within the context o...

PT-2017-1256

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in the Qualcomm Wi-Fi driver, which is associated with insufficient access control. This vulnerability could allow a remote...

PT-2017-1255

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 through Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in the Qualcomm Wi-Fi driver, which is associated with insufficient access control. This vulnerability could allow a...

Vulnerability in Intel® RealSense™ Web Component allows authenticated users to elevate privileges via updater subsystem

Summary: The vulnerability allows a potentially malicious 3rd party to gain the highest possible elevation of privilege level in the Operating System. Description: The vulnerability allows a potentially malicious 3rd party to gain the highest possible elevation of privilege in the Operating Syste...

emlog personal blog system background there is privilege elevation vulnerability

Impact version emlog = 5.1.2 Prerequisites: need to log in the background Exploit Log in the background after a visit to admin/? action=phpinfo page, get website physical path In the database backup page to back up the database, export to a local computer, and then edit the exported . sql format ...

CVE-2017-0431

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32573899...

Linux Kernel Elevation of Privilege Vulnerability (CNVD-2017-01069)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. An elevation of privilege vulnerability exists in the Linux Kernel. An attacker can exploit this vulnerability to obtain elevated privileges and perform unauthorized operation...

Security Advisory - Two Security Vulnerabilities in Huawei EMUI

Huawei EMUI3.1 has two vulnerabilities. The Keyguard application in Huawei EMUI3.1 has a privilege elevation vulnerability due to insufficient validation on specific parameters. An attacker may trick a user into installing a malicious application. Successful exploit could allow the attacker to...

[SECURITY] [DLA 795-1] hesiod security update

Package : hesiod Version : 3.0.2-21+deb7u1 CVE IDs : CVE-2016-10151 CVE-2016-10152 Debian Bugs : 852094, 852093 It was discovered that there were two vulnerabilities in hesiod, Project Athenas DNS-based directory service: CVE-2016-10151: A weak SUID check allowing privilege elevation...

PT-2017-1084

Name of the Vulnerable Software and Affected Versions Moodle versions 2.x through 3.x Description The issue is related to insufficient access control in the course notes viewing capability, which is checked in the wrong context. This can potentially allow a remote attacker to elevate their...

PT-2017-1177

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a lack of access control in the Broadcom Wi-Fi driver of the Android operating system. It allows a remote attacker to execute arbitrary code. This is an elevation of...

Lenovo XClarity Administrator Elevation of Privilege Vulnerability

Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The solution supports simplified infrastructure management, faster server response, and improved performance of Lenovo server systems. An elevation of privilege vulnerability exists in Lenovo...