Flaws in Kerberos PAC validation can trigger privilege elevation.

Description The winbindd part of Samba offers verification and unpacking of the PAC Privilege Attribute Certificate received via Kerberos. When parsing the PAC, winbindd may write beyond the allocated buffer, however the data involved is from the server private key and so not user-controlled...

Huawei cellular Wi-Fi driver suffers from input checksum vulnerability

Huawei Think 5 is a smartphone from the Chinese company Huawei Huawei. An input validation vulnerability exists in the Huawei Think 5 cellular Wi-Fi driver. An attacker could trick users into installing a malicious application, which could exploit the vulnerability to send specific parameters to...

Elevation of Privilege Vulnerability in the background of emlog personal blog system

Short for every memory log, emlog is a PHP and MySQL based blog and CMS builder. A privilege elevation vulnerability exists in the background /src/admin/data.php page of the emlog personal blog system. An attacker can exploit the vulnerability to elevate privileges by importing files...

Elevation of Privilege Vulnerability in Power Management Component of Multiple Apple Products

Apple iOS, macOS, and tvOS are all products of Apple Inc. Apple iOS is an operating system developed for mobile devices; macOS is an operating system developed for Mac computers. power Management is one of the power management components. A security vulnerability exists in the Power Management...

Microsoft Windows Secure Kernel Mode Privilege Elevation Vulnerability (3205642)

This host is missing an important security update according to Microsoft Bulletin MS16-150. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:3146-1)

The SUSE Linux Enterprise 12 SP 2 kernel was updated to fix two security issues. The following security bugs were fixed : - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604. -...

MS16-149: Description of the security update for Windows: December 13, 2016

None None...

MS16-149: Description of the security update for Windows: December 13, 2016

None None...

Security update for the openSUSE Leap 42.1 kernel. (important)

The openSUSE Leap 42.1 kernel has been updated to fix a security issue: - CVE-2016-9576: A use-after-free vulnerability in the SCSI generic driver allows users with write access to /dev/sg or /dev/bsg to elevate their privileges bsc1013604...

Cisco AnyConnect Secure Mobility Client Local Elevation of Privilege Vulnerability

Cisco AnyConnect Secure Mobility Client is a secure mobility client from Cisco that provides secure access to networks and applications from any device. A local elevation of privilege vulnerability exists in Cisco AnyConnect Secure Mobility Client. A local attacker could use this vulnerability to...

MariaDB 10.1.0 < 10.1.18 Multiple Vulnerabilities

The version of MariaDB installed on the remote host is prior to 10.1.18. It is, therefore, affected by multiple vulnerabilities as referenced in the 10.1.18 advisory. - Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; MariaDB before...

Google Android MediaTek Driver Elevation of Privilege Vulnerability (CNVD-2016-12188)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, and MediaTek Driver is a MediaTek driver component used in one of MediaTek's devices. An elevation of privilege vulnerability exists in the MediaTek Driver in versions of Android...

Google Android Synaptics Touchscreen Driver Elevation of Privilege Vulnerability (CNVD-2016-12178)

Android on Nexus 9 and Android One is a Linux-based open source operating system for Nexus 9 and Android One smart devices developed by Google Inc. and the Open Handheld Alliance OHA. Synaptics Touchscreen Driver is one of the touchscreen drivers. An elevation of privilege vulnerability exists in...

Google Android kernel performance subsystem elevation of privilege vulnerability (CNVD-2016-12173)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which the Kernel Performance Subsystem is a kernel performance component. The kernel performance subsystem in Android is vulnerable to a power lifting vulnerability. The...

Google Nexus NVIDIA Video Driver Local Elevation of Privilege Vulnerability (CNVD-2016-12237)

Android on Nexus 9 is a set of open source operating system running on Nexus 9 Tablet PC and based on Linux, which is jointly developed by Google and the Open Handheld Alliance OHA for short.NVIDIA Bideo Driver is an NVIDIA Video Driver used in it. A local elevation of privilege vulnerability...

Apache Tomcat Local Elevation of Privilege Vulnerability (CNVD-2016-12018)

Apache Tomcat is the United States Apache Apache Software Foundation under the Jakarta project of a lightweight Web application server, which is mainly used for the development and debugging of JSP programs for small and medium-sized systems. A local elevation of privilege vulnerability exists in...

DiskBoss Enterprise Server <= 7.4.28 GET Buffer Overflow Vulnerability - Windows

DiskBoss Enterprise is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

BitUnmap: Attacking Android Ashmem

Posted by Gal Beniamini, Project Zero The law of leaky abstractions states that “all non-trivial abstractions, to some degree, are leaky”. In this blog post we’ll explore the ashmem shared memory interface provided by Android and see how false assumptions about its internal operation can result i...

Privilege elevation vulnerability in TrustZone driver for some Huawei phones

Huawei P9, P9 Lite, P8 Lite are Huawei smartphones. An elevation of privilege vulnerability exists in the TrustZone driver of some Huawei phones. An attacker may trick users into installing a malicious application, and the application can exploit the vulnerability to send specific parameters to t...

CVE-2016-6730

An elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which...