5235 matches found
CVE-2019-6225
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may be able to elevate privileges...
CVE-2019-6202
CVE-2019-6202 affects Apple platforms (iOS, macOS, watchOS). It is an out-of-bounds read issue resolved by updates: iOS 12.1.3, macOS Mojave 10.14.3, watchOS 5.1.3. The issue allowed a malicious application to elevate privileges; root cause described as out-of-bounds read corrected with improved ...
Google Android Media framework elevation of privilege vulnerability (CNVD-2019-23554)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Media framework component of Google Android 9. An attacker can exploit this vulnerability to cause a local escalation of...
NVIDIA Windows GPU Display Driver Privilege License and Access Control Issues Vulnerability
The NVIDIA Windows GPU Display Driver is a display driver for Windows systems. A vulnerability exists in the 3D visual component of the NVIDIA Windows GPU display driver. The vulnerability stems from the Stereo Services software not checking for hard links when opening files. An attacker could us...
NVIDIA Windows GPU Display Driver Denial of Service Vulnerability (CNVD-2019-28600)
NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver dedicated to the Windows platform. The NVIDIA Windows GPU Display Driver denial of service vulnerability can be exploited by attackers to cause a denial of service or elevation of privilege...
Vulnerability Spotlight: Multiple vulnerabilities in GOG Galaxy Games
Richard Johnson and Tyler Bohan of Cisco Talos discovered these vulnerabilities. Executive summary The GOG Galaxy video game launcher contains multiple vulnerabilities that could allow a malicious actor to carry out a variety of attacks. GOG Galaxy Games is a video game storefront that allows use...
Intel Unite App Elevation of Privilege Vulnerability
Intel Unite is a set of enterprise meeting collaboration solutions from Intel Intel. A security vulnerability exists in the management portal in Intel UniteR versions 3.2 through 3.3. An attacker could exploit the vulnerability to bypass authentication and elevate privileges...
Wibu-Systems WibuKey Elevation of Privilege Vulnerability
Wibu-Systems WibuKey is a digital rights management DRM system from Wibu-Systems. A security vulnerability exists in the 0x8200E804 IOCTL handler in Wibu-Systems WibuKey version 6.40 Build 2400. An attacker can exploit the vulnerability by sending a specially crafted IRP request to corrupt memory...
Security Updates for Exchange (February 2019)
The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - Multiple Vulnerabilites with the included libraries from Oracle Outside. CVE-2018-18223, CVE-2018-18224, CVE-2018-3147, CVE-2018-3217, CVE-2018-3218,...
KLA11418 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerabili...
KLA11412 Elevation of Privilege Vulnerability in Microsoft Exchange Server
Unspecified vulnerability was found in Microsoft Exchange server. Malicious users can exploit this vulnerability via specially designed request to gain privileges. Original advisories ADV190007 Related products Microsoft-Exchange-Server CVE list KB list 4471391 4471392 4487052 4345836 Solution...
About the security content of iTunes 12.9.3 for Windows
About the security content of iTunes 12.9.3 for Windows This document describes the security content of iTunes 12.9.3 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patche...
About the security content of macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
The vulnerability of Siemens Sinumerik programmable logic controllers lies in errors in control of resolution settings, which allows a intruder to exploit a privileged command to gain enhanced privileges.
The vulnerability of Siemens Sinumerik programmable logic controllers is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to use a privileged application command to elevate user privileges, but not to the level of root...
About the security content of iOS 12.1.3
About the security content of iOS 12.1.3 This document describes the security content of iOS 12.1.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
Huawei PCManager Elevation of Privilege Vulnerability
Huawei PCManager is a set of computer management software from Huawei, China. An elevation of privilege vulnerability exists in Huawei PCManager. An attacker can exploit this vulnerability by tricking a user into installing and running a malicious application. An attacker who successfully exploit...
Microsoft Windows 10 - DSSVC CanonicalAndValidateFilePath Security Feature Bypass
Microsoft Windows 10 - DSSVC CanonicalAndValidateFilePath Security Feature Bypass Windows: DSSVC CanonicalAndValidateFilePath Security Feature Bypass Platform: Windows 10 1803 and 1809. Class: Security Feature Bypass/Elevation of Privilege Security Boundary per Windows Security Service Criteria:...
Microsoft Windows 10 - DSSVC CanonicalAndValidateFilePath Security Feature Bypass
Windows: DSSVC CanonicalAndValidateFilePath Security Feature Bypass Platform: Windows 10 1803 and 1809. Class: Security Feature Bypass/Elevation of Privilege Security Boundary per Windows Security Service Criteria: User boundary NOTE: This is one of multiple issues I’m reporting in the same...
KioWare Server Elevation of Privilege Vulnerability
KioWare is a suite of self-service terminal browser software. The software has the ability to restrict end-user access to specific interfaces. A security vulnerability exists in KioWare Server 4.9.6 and prior versions. An attacker can exploit this vulnerability by replacing the KWSService service...
SAP Enterprise Financial Services Remote Authorization Bypass Vulnerability
SAP Enterprise Financial Services is a set of enterprise financial services solutions from SAP. A remote authorization bypass vulnerability exists in SAP Enterprise Financial Services, which can be exploited by a remote attacker to elevate privileges due to a program's failure to perform required...