PT-2017-2083

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 Description An elevation of privilege issue in the Synaptics touchscreen driver could allow a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated...

PT-2017-1256

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in the Qualcomm Wi-Fi driver, which is associated with insufficient access control. This vulnerability could allow a remote...

PT-2017-1195

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to an elevation of privilege vulnerability in the Realtek sound driver, which could allow a local malicious application to execute arbitrary code within the context o...

PT-2017-1253

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in the Qualcomm sound driver, which could allow a local malicious application to execute arbitrary code within the context of...

CVE-2017-0412: Time-of-check Time-of-use (TOCTOU) Race Condition

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

PT-2017-10563

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description An elevation of privilege issue in Bluetooth could allow a nearby attacker to gain access to device documents. This issue is considered moderate severity because it requires the...

Vulnerability in Intel® RealSense™ Web Component allows authenticated users to elevate privileges via updater subsystem

Summary: The vulnerability allows a potentially malicious 3rd party to gain the highest possible elevation of privilege level in the Operating System. Description: The vulnerability allows a potentially malicious 3rd party to gain the highest possible elevation of privilege in the Operating Syste...

emlog personal blog system background there is privilege elevation vulnerability

Impact version emlog = 5.1.2 Prerequisites: need to log in the background Exploit Log in the background after a visit to admin/? action=phpinfo page, get website physical path In the database backup page to back up the database, export to a local computer, and then edit the exported . sql format ...

CVE-2017-0431

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32573899...

Linux Kernel Elevation of Privilege Vulnerability (CNVD-2017-01069)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. An elevation of privilege vulnerability exists in the Linux Kernel. An attacker can exploit this vulnerability to obtain elevated privileges and perform unauthorized operation...

Security Advisory - Two Security Vulnerabilities in Huawei EMUI

Huawei EMUI3.1 has two vulnerabilities. The Keyguard application in Huawei EMUI3.1 has a privilege elevation vulnerability due to insufficient validation on specific parameters. An attacker may trick a user into installing a malicious application. Successful exploit could allow the attacker to...

[SECURITY] [DLA 795-1] hesiod security update

Package : hesiod Version : 3.0.2-21+deb7u1 CVE IDs : CVE-2016-10151 CVE-2016-10152 Debian Bugs : 852094, 852093 It was discovered that there were two vulnerabilities in hesiod, Project Athenas DNS-based directory service: CVE-2016-10151: A weak SUID check allowing privilege elevation...

PT-2017-1084

Name of the Vulnerable Software and Affected Versions Moodle versions 2.x through 3.x Description The issue is related to insufficient access control in the course notes viewing capability, which is checked in the wrong context. This can potentially allow a remote attacker to elevate their...

PT-2017-1177

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a lack of access control in the Broadcom Wi-Fi driver of the Android operating system. It allows a remote attacker to execute arbitrary code. This is an elevation of...

Lenovo XClarity Administrator Elevation of Privilege Vulnerability

Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The solution supports simplified infrastructure management, faster server response, and improved performance of Lenovo server systems. An elevation of privilege vulnerability exists in Lenovo...

PT-2017-1091

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the bootloader, which could allow a local attacker to execute arbitrary modem commands on the device. This problem is rated ...

CVE-2017-0383

An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally...

CVE-2017-0403

An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-8458

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2016-8456

CVE-2016-8456 describes an elevation of privilege vulnerability in the Broadcom Wi‑Fi driver used by Android on devices such as Nexus/Pixel families. The issue allows a local malicious application to execute arbitrary code in the kernel context, and it is rated High because an attacker must first...