CVE-2016-7655

An issue was discovered in certain Apple products. iOS before 10.2 is affected. macOS before 10.12.2 is affected. The issue involves the "CoreMedia External Displays" component. It allows local users to gain privileges or cause a denial of service type confusion via unspecified vectors...

CVE-2016-1880

The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "handling of Linux futex robust lists."...

CVE-2016-6527

The SmartCall Activity component in Telecom application on Samsung Note device L5.0/5.1 and M6.0 allows attackers to cause a denial of service crash and reboot or possibly gain privileges via a malformed serializable object...

PT-2017-1186 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.9.5 Description: The issue is related to the load segment descriptor implementation in the Linux kernel, which improperly emulates a "MOV SS, NULL selector" instruction. This can allow guest OS users to cause ...

Samsung Note Telecom Denial of Service Vulnerability

The Samsung Note is a smartphone released by South Korean company Samsung.Telecom is one of the communication components. A security vulnerability exists in the receiver in the Telecom application on Samsung Note devices, which stems from the program's failure to properly handle exceptions. An...

DEBIAN-CVE-2016-7944

Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INTMAX, which triggers the client to stop reading data and get out of sync...

DEBIAN-CVE-2015-8966

arch/arm/kernel/sysoabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted 1 FOFDGETLK, 2 FOFDSETLK, or 3 FOFDSETLKW command in an fcntl64 system call...

Linux Kernel Competitive Conditions Vulnerability (CNVD-2016-12202)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A contention condition vulnerability exists in the 'the ionioctl' function in the drivers/staging/android/ion/ion.c file in Linux kernel versions prior to 4.6. A local attacke...

Xen elevation of privilege vulnerability (CNVD-2016-11704)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from an elevation of...

Git for Windows Untrusted Search Path Vulnerability

Git for Windows is a free, open source distributed version control system based on Windows developed by American software developer Linus Torvalds Linus Torvalds. An untrustworthy search path vulnerability exists in version 1.x of Git for Windows. This vulnerability can be exploited by a local...

CVE-2016-7252

Microsoft SQL Server 2016 mishandles the FILESTREAM path, which allows remote authenticated users to gain privileges via unspecified vectors, aka "SQL Analysis Services Information Disclosure Vulnerability."...

HP ThinPro Local Elevation of Privilege Vulnerability

HP ThinPro is a thin client device from Hewlett-Packard HP in the United States. A security vulnerability exists in the Keyboard Layout Control Panel and Virtual Keyboard application on the HP ThinPro operating system. An attacker could exploit the vulnerability to locally gain unauthorized acces...

Microsoft Windows Kernel Local Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. A local elevation of privilege vulnerability exists in the kernel in Microsoft Windows, which arises from a failure of the kernel API to properly restrict acces...

Android Synaptics Touchscreen Driver Privilege Gain Vulnerability

Android on Nexus 5X is an open source Linux-based operating system for the Nexus 5X smartphone developed by Google and the Open Handset Alliance OHA.The Synaptics touchscreen driver is used in one of the... Synaptics touchscreen driver. A privilege acquisition vulnerability exists in the Synaptic...

KLA10885 Multiple vulnerabilities in Microsoft Edge and Internet Explorer

Multiple serious vulnerabilities have been found in Microsoft Internet Explorer and Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handlin...

IBM Security Guardium Database Activity Monitor Privilege Gain Vulnerability

IBM Security Guardium Database Activity Monitor is a database activity monitor product from IBM USA. A security vulnerability exists in IBM Security Guardium Database Activity Monitor, which can be exploited by remote attackers to send HTTP requests with administrator privileges...

ABB DataManagerPro DLL Local Code Execution Vulnerability

ABB DataManagerPro is a data analysis software package from ABB Switzerland. The software allows automatic data collection via Ethernet and database management. ABB DataManagerPro has a local code execution vulnerability. This vulnerability can be exploited by a local attacker to gain privileges ...

Google Android Qualcomm power driver elevation of privilege vulnerability

Android on Nexus 5X and 6P is a Linux-based open source operating system for the Nexus 5X and 6P smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm power driver is a Qualcomm power connectivity driver component. Qualcomm power driver is a Qualcomm power connection driver...

Xen Local Elevation of Privilege Vulnerability (CNVD-2016-07417)

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. There is a local privilege extractio...

Android LibUtils Arbitrary Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability in Android LibUtils allows remote attackers to exploit the vulnerability to build malicious applications that can be elevated in privilege by tricking users in...