Android Qualcomm Component Elevation of Privilege Vulnerability

Android on Nexus 5 and 7 is an open source Linux-based operating system for the Nexus 5 and 7 smartphones developed by Google and the Open Handset Alliance OHA in the U.S. Qualcomm is one of the U.S.-based companies that use Qualcomm components for their devices. Qualcomm is a Qualcomm...

Microsoft Kernel-Mode Drivers Multiple Privilege Elevation Vulnerabilities (3171481)

This host is missing an important security update according to Microsoft Bulletin MS16-090. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-090: Description of the security update for Windows kernel-mode drivers: July 12, 2016

None None...

Perl Local Elevation of Privilege Vulnerability

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall. A security vulnerability exists in Perl. A local attacker can exploit this vulnerability by supplying specially crafted data to the XSLoader component to gain privileges on the target syst...

Vulnerabilities in the Internet Explorer browser, which allow a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities in Internet Explorer allow attackers to elevate their privileges level. By exploiting these vulnerabilities, attackers cannot execute arbitrary code, but they can use them to exploit other vulnerabilities with elevated privileges e.g., to execute arbitrary code...

Lenovo Solution Center Local Elevation of Privilege Vulnerability

Lenovo Solution Center LSC is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. A local elevation of privilege vulnerability exists in versions prior to LSC 3.3.003. A local attacker...

Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities

Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SYMANTEC-SEPM-MULTIPLE-VULNS.txt + ISR: ApparitionSec Vendor: ================ www.symantec.com Product: =========== SEPM Symantec Endpoint Protection Manager and client v12.1...

Microsoft Windows - Custom Font Disable Policy Bypass

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=779 Windows: Custom Font Disable Policy Bypass Platform: Windows 10 Only Class: Security Feature Bypass Summary: It’s possible to bypass the ProcessFontDisablePolicy check in win32...

Windows kernel mode drivers privilege elevation vulnerabilities MS16-062)

No description provided by source...

CVE-2016-3219

The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

Microsoft Kernel-Mode Drivers Privilege Elevation Vulnerabilities (3164028)

This host is missing an important security update according to Microsoft Bulletin MS16-073. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Web Proxy Auto Discovery (WPAD) Privilege Elevation Vulnerabilities (3165191)

This host is missing an important security update according to Microsoft Bulletin MS16-077. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Oracle Outside in Libraries Elevation of Privilege Vulnerabilities

This security update addresses the following vulnerabilities, which are described in Oracle Critical Patch Update Advisory - January 2016: CVE-2015-6013: Oracle Outside In 8.5.2 WK4 stack buffer overflow CVE-2015-6014: Oracle Outside In 8.5.2 DOC stack buffer overflow CVE-2015-6015: Oracle OIT...

MS16-074: Description of the security update for Microsoft Graphics Component: June 14, 2016

None None...

MS16-073: Description of the security update for kernel mode drivers: June 14, 2016

None None...

Microsoft Win32k Elevation of Privilege (MS16-073: CVE-2016-3218)

A use after free vulnerability was discovered in Microsoft Windows that could be abused by attackers to elevate privileges. The defect is found in win32k sub component when dealing with a ExtFloodFill method. A successful exploitation of this issue could allow an attacker to elevate his privilege...

MS16-075: Security Update for Windows SMB Server: June 14, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker logs on to the system and runs a specially crafted application.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker...

Android SD Card User Control Emulation Layer Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.SD Card Emulation Layer is one of the SD card user controls. An elevation of privilege vulnerability exists in the SD Card user control emulation layer of Android. A local attacker...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03926)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Avast Pro Heap-Based Buffer Overflow Vulnerability

Avast Pro is prone to heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...