CVE-2016-7184

The CVE-2016-7184 issue affects the Common Log File System (CLFS) driver in Windows operating systems ranging from Windows Vista SP2 to Windows Server 2016 (including Windows 10 versions 1511 and 1607). The vulnerability enables local users to achieve privilege escalation via a crafted applicatio...

CVE-2016-7255

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Oracle MySQL, MariaDB and PerconaDB Privilege Mobilization Vulnerability

Oracle MySQL, MariaDB, and PerconaServer are database management systems.MySQL is a product of Oracle Corporation.MariaDB is a product of MontyProgramAb, Inc. and the MariaDB Foundation of the U.S.A. PerconaServer is a product of Percona, Inc. PerconaXtraDBCluster is a scalable, open source...

NVIDIA Windows GPU Display Driver Local Privilege Vulnerability

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. The NVIDIA Windows GPU Display Driver is vulnerable to a local elevation of privilege vulnerability that arises from the program failing to properly validate values. A local attacke...

CVE-2016-7188

The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and 1607 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."...

CVE-2016-0075

The kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry, aka "Windows Kernel Local Elevation of...

CVE-2016-7185

CVE-2016-7185 is a Windows kernel‑mode driver elevation of privilege vulnerability (Win32k) affecting multiple Windows versions (Vista to Windows 10 1607). Root cause: improper handling of objects in memory by kernel‑mode drivers, enabling local users to execute code with HIGH/Kernel privileges v...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-07746)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows 10 Gold, 1511 and 1607 versions. A local attacker can exploit the vulnerability to execute arbitrary code with system administrator...

CVE-2016-3348

CVE-2016-3348 is a local elevation-of-privilege vulnerability in the Windows kernel-mode driver Win32k.sys. The root cause is how the kernel-mode driver handles objects in memory, which an attacker can exploit by running a crafted application after logging in to gain kernel-level privileges. Affe...

CVE-2016-3349

The kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

SAP SAPCAR Local Privilege Vulnerability

SAP SAPCAR is a set of compression and decompression tools for use in SAP Kernel. A security vulnerability exists in SAP SAPCAR that allows a local attacker to exploit the vulnerability to elevate privileges...

Android on Nexus Qualcomm Component Privilege Acquisition Vulnerability (CNVD-2016-06233)

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies used in the Qualcomm devices. Qualcomm is a Qualcomm device-specific component us...

Android Qualcomm GPU Driver Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and the Qualcomm GPU Driver is a graphics processor driver developed by Qualcomm. A power lifting vulnerability exists in the Qualcomm GPU Driver used in Android. The vulnerability can be...

Google Nexus elevation of privilege vulnerability (CNVD-2016-06075)

Google Nexus is Google's line of high-end cell phones powered by stock Android. Google Nexus suffers from an elevation of privilege vulnerability that can be exploited by an attacker to execute arbitrary code using kernel wide elevated privileges...

Foreman API and UI Privilege Vulnerability

Foreman is a set of lifecycle management tools for use in physical and virtual servers. The tool provides features such as service provisioning, configuration management, and status reporting. A privilege-lifting vulnerability exists in the Foreman API and UI. When a restricted user from a specif...

IBM TRIRIGA Application Platform Privilege Vulnerability

IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. A privilege extraction vulnerability exists in IBM TRIRIGA Application Platform, which can be exploited by an attacker to gain privileges...

Drupal Privilege Vulnerability

Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. Drupal has an elevation of privilege vulnerability that allows remote attackers to exploit the vulnerability to elevate privileges...

CVE-2016-3239

The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via vectors involving filesystem write operations, aka...

CVE-2016-3250

CVE-2016-3250 is a Windows kernel-mode elevation-of-privilege vulnerability in Win32k. The issue affects kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 (Gold/1511), where a crafted application could cause memory-object handling flaws to escalate privileges locally. The NVD en...