CVE-2018-12181

Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access...

CVE-2018-12181

Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access...

Stack overflow

Stack overflow in corrupted bmp for EDK II may allow unprivileged user to potentially enable denial of service or elevation of privilege via local access...

GOG Galaxy Games directory insecure file permissions local privilege elevation vulnerability

Summary An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy’s “Games” directory. An attacker can overwrite executables of installed games to exploit this vulnerability and execute arbitrary code with elevated privileges. Tested Versions Gog...

About the security content of iOS 12.2

About the security content of iOS 12.2 This document describes the security content of iOS 12.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...

About the security content of macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra

About the security content of macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra This document describes the security content of macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra. About Apple security updates For o...

Windows Subsystem for Linux Privilege Escalation

The vulnerability of the compatibility subsystem for running Linux applications stems from a numerical overflow. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code through a specially created application...

PT-2019-5725

Name of the Vulnerable Software and Affected Versions: NVIDIA GeForce, Quadro, and Tesla graphics drivers for Windows affected versions not specified Description: The issue is related to errors in pointer dereferencing in the DxgkDdiSubmitCommandVirtual function of NVIDIA graphics drivers...

PT-2019-4638

Name of the Vulnerable Software and Affected Versions Glib versions prior to 2.60.0 Description The issue is related to incorrect permission handling in the Glib library, specifically in the functions g file make directory with parents and g file replace contents. This can allow a remote attacker...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Security Directory Integrator (CVE-2018-2800, CVE-2018-2783)

Summary There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition Version 7.0 and Version 8.0 that is used by Security Directory Integrator. These issues were disclosed as part of the IBM Java SDK updates in Oct 2018 and Jan 2019 Vulnerability Details CVEID:...

Microsoft Windows Subsystem for Linux Elevation of Privilege Vulnerability (CNVD-2019-16732)

Microsoft Windows Server and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Windows Subsystem for Linux is one of the Linux subsystems. The Windo...

Microsoft Windows Subsystem for Linux Elevation of Privilege Vulnerability (CNVD-2019-16731)

Microsoft Windows Server and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.Windows Subsystem for Linux is one of the Linux subsystems. The Windo...

Security Bulletin: Multiple security vulnerabilities have been identified in Jazz Team Server shipped with Jazz Reporting Service (CVE-2018-1890, CVE-2018-12547, CVE-2019-2426, CVE-2018-11212)

Summary Jazz Team Server is shipped as a component of Jazz Reporting Service JRS. Information about multiple security vulnerabilities affecting Jazz Team Server and Jazz-based products has been published in a security bulletin. Vulnerability Details CVEID: CVE-2018-1890 DESCRIPTION: IBM SDK, Java...

Security Bulletin: A Security Vulnerability affects IBM Cloud Private MariaDB

Summary A Security Vulnerability affects IBM Cloud Private MariaDB Vulnerability Details CVEID: CVE-2018-6557 DESCRIPTION: base-files package Ubuntu is vulnerable to a denial of service, caused by an issue with improper handling of temporary files in the MOTD update script. By sending a...

Exploit for Improper Validation of Array Index in Shanda Maplestory_Online

SdoKeyCrypt.sys - Local Privilege Elevation Vulnerability...

Exploit for Improper Validation of Array Index in Shanda Maplestory_Online

SdoKeyCrypt.sys - Local Privilege Elevation Vulnerability...

PT-2019-1609

Name of the Vulnerable Software and Affected Versions Active Directory affected versions not specified Description The issue is related to an elevation of privilege vulnerability in Active Directory Forest trusts. This vulnerability is due to a default setting that allows an attacker in the...

VMSA-2019-0002:VMware Workstation update addresses elevation of privilege issues.

VMSA-2019-0003 VMware Horizon update addresses Connection Server information disclosure vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2019-0003 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: VMware Horizon update addresses...

CVE-2018-1890

IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081...

Code injection

IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 152081...