Google Nexus NVIDIA GPU driver elevation of privilege vulnerability (CNVD-2017-00470)

Android on Nexus 9 is a Linux-based open source operating system for the Nexus 9 tablet developed by Google and the Open Handset Alliance OHA, and the NVIDIA camera driver is one of the camera drivers used in it. An elevation of privilege vulnerability exists in the NVIDIA GPU driver on Google...

Google Android Audioserver elevation of privilege vulnerability (CNVD-2017-00576)

Google Android is an operating system developed by Google for smartphones. Google Android Audioserver has a security vulnerability that allows remote attackers to exploit the vulnerability through a specially crafted application that can elevate privileges...

Microsoft Edge Privilege Elevation Vulnerability (3214288)

This host is missing an important security update according to Microsoft Bulletin MS17-001. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Google Android Synaptics Touchscreen Driver Privilege Elevation Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Synaptics touchscreen Driver is one. An elevation of privilege vulnerability exists in the Synaptics touchscreen driver in versions of Android prior to 7.0. An attacker c...

MS15-101: Description of the security update for the .NET Framework 4 on Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: September 8, 2015

MS15-101: Description of the security update for the .NET Framework 4 on Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2: September 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework that could...

MS14-072: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 11, 2014

MS14-072: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 11, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege...

MS14-072: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: November 11, 2014

MS14-072: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: November 11, 2014 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that cou...

MS15-118: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 10, 2015

MS15-118: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: November 10, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework. The most severe of these vulnerabilities could...

Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: December 10, 2013

Description of the security update for the .NET Framework 4.5.1 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: December 10, 2013 September 9, 2014 This security update has been re-released and contains updated files. We recommend that you apply this updated security update. View...

MS13-052: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: July 9, 2013

MS13-052: Description of the security update for the .NET Framework 3.5 on Windows 8 and Windows Server 2012: July 9, 2013 View products that this article applies to. Introduction This update resolves a vulnerability in the Microsoft .NET Framework that could allow elevation of privilege on a...

MS15-004: Description of the security update for Windows 7 and Windows Server 2008 R2 if the Remote Desktop Connection 8.0 client update is installed: January 13, 2015

MS15-004: Description of the security update for Windows 7 and Windows Server 2008 R2 if the Remote Desktop Connection 8.0 client update is installed: January 13, 2015 Summary This security update resolves a privately reported vulnerability in the TS WebProxy component in Windows 7 and Windows...

MS15-101: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: September 8, 2015

MS15-101: Description of the security update for the .NET Framework 4.5.1 and 4.5.2 on Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: September 8, 2015 View products that this article applies to. Summary This update resolves vulnerabilities in the Microsoft .NET Framework that could all...

Google Android NVIDIA GPU Driver Privilege Elevation Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android NVIDIA GPU Driver, which can be exploited by an attacker to execute arbitrary code with elevated privileges in...

e107 CMS is less than or equal to 2. 1. 2 elevation of privilege vulnerability analysis-vulnerability warning-the black bar safety net

0x00 vulnerability background e107 CMS is a based on PHP, Bootstrap, Mysql, web site content management system, can be widely used for personal blogs, enterprise built station, in the global range more widely. 0x01 vulnerability affects version version 0x02 vulnerability analysis of the environme...

CVE-2016-8425

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

USN-3146-2: Linux kernel (Xenial HWE) vulnerabilities | Cloud Foundry

USN-3146-2: Linux kernel Xenial HWE vulnerabilities Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 LTS Description It was discovered that the getuserasmex implementation in the Linux kernel for x86/x8664 contained extended asm statements that were incompatible with the...

Huawei畅享5手机MTK平台存在输入校验漏洞(CNVD-2016-12841)

Huawei Think 5 is a smartphone from the Chinese company Huawei Huawei. An input validation vulnerability exists in the MTK platform of the Huawei Changsha 5 phone. An attacker may trick the user into installing a malicious application, which can exploit the vulnerability to send specific paramete...

Xen elevation of privilege vulnerability (CNVD-2016-12848)

Xen is an open source virtual machine monitor product developed by the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from an elevation of...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:3188-1)

The SUSE Linux Enterprise 12 SP 2 kernel was updated to fix two security issues. The following security bugs were fixed : - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. -...

CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC Privilege Attribute Certificate checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the...