Lucene search
+L

1347 matches found

BDU FSTEC
BDU FSTEC
added 2017/06/23 12:0 a.m.12 views

The vulnerability of the AVEVideoEncoder component in the iOS operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the AVEVideoEncoder component in the iOS operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in a privileged context, or trigger a service failure memory...

9.3CVSS8.1AI score0.04224EPSS
SaveExploits2References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/06/23 12:0 a.m.10 views

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the WindowServer component of the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or trigger a service failure memory...

9.3CVSS8AI score0.01169EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/06/23 12:0 a.m.9 views

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the WindowServer component of the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or trigger a service failure memory...

9.3CVSS8AI score0.01354EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2017/06/21 12:0 a.m.43 views

Apple OS X IOReportUserClient Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

4.9CVSS2.2AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.11 views

The vulnerability of the DiskArbitration component in the Mac OS X operating system allows a hacker to execute arbitrary code in a privileged context.

The vulnerability of the DiskArbitration component in the Mac OS X operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary code in privileged context racing condition through a...

7.6CVSS7.6AI score0.0439EPSS
SaveExploits3References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.9 views

The vulnerability of the Kernel component in Mac OS X and iOS operating systems allows attackers to execute arbitrary code in a privileged context.

The vulnerability of the Kernel component in Mac OS X and iOS operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context racing environment through a specially created...

7.6CVSS7.9AI score0.04189EPSS
SaveExploits4References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2017/06/15 12:0 a.m.9 views

The vulnerability of the Multi-Touch component in the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the Multi-Touch component in the Mac OS X operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory...

9.3CVSS8AI score0.0113EPSS
SaveExploits0References2Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2017/06/13 12:0 a.m.47 views

(Pwn2Own) Microsoft Windows NtUserLinkDpiCursor Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

6.9CVSS8AI score0.02341EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/06/13 12:0 a.m.36 views

Trend Micro Maximum Security tmusa Time-Of-Check/Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privilege on vulnerable installations of Trend Micro Maximum Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

6.9CVSS4.1AI score
SaveExploits0References1
OSV
OSV
added 2017/05/22 5:29 a.m.4 views

CVE-2017-2543

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

7.8CVSS7.6AI score0.0113EPSS
SaveExploits0References2
OSV
OSV
added 2017/05/22 5:29 a.m.2 views

CVE-2017-2546

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

7.8CVSS7.6AI score0.01169EPSS
SaveExploits0References2
OSV
OSV
added 2017/05/22 5:29 a.m.5 views

CVE-2017-2542

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Multi-Touch" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

7.8CVSS6.1AI score0.0113EPSS
SaveExploits0References2
OSV
OSV
added 2017/05/22 5:29 a.m.4 views

CVE-2017-6985

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

7.8CVSS7.6AI score0.0113EPSS
SaveExploits0References2
OSV
OSV
added 2017/05/22 5:29 a.m.5 views

CVE-2017-2533

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitration" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app...

7CVSS7.6AI score0.0439EPSS
SaveExploits3References5
Zero Day Initiative
Zero Day Initiative
added 2017/05/18 12:0 a.m.67 views

(Pwn2Own) Apple macOS AppleMultitouchDevice Use-After-Free Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the...

6.9CVSS3.8AI score0.0113EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/05/18 12:0 a.m.43 views

(Pwn2Own) Apple macOS HFS Uninitialized Memory Information Disclosure Privilege Escalation Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...

1.9CVSS6.9AI score0.00794EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/05/18 12:0 a.m.46 views

(Pwn2Own) Apple macOS AppleMultitouchDevice Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...

1.9CVSS3.2AI score0.0113EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/05/18 12:0 a.m.8 views

The vulnerability of the iOS operating system and the Mac OS X operating system allows a perpetrator to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the iOS operating system and the Mac OS X operating system arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory corruption through a...

9.3CVSS8AI score0.02016EPSS
SaveExploits0References6Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2017/05/15 12:0 a.m.41 views

(Pwn2Own) Apple macOS WindowServer _XGetConnectionPSN Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

1.9CVSS4.1AI score0.00969EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/05/10 12:0 a.m.52 views

Microsoft Internet Explorer Enhanced Protected Mode Sandbox Escape Vulnerability

This vulnerability allows remote attackers to escape the Enhanced Protected Mode EPM sandbox on vulnerable installations of Microsoft Internet Explorer. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specif...

4.4CVSS4.4AI score0.09816EPSS
SaveExploits0References1
Rows per page
Query Builder