Privilege escalation

Symantec Endpoint Encryption prior to SEE 11.2.1 MP1 may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or...

CVE-2019-9694

Symantec Endpoint Encryption (SEE) is affected before version 11.2.1 MP1 by a privilege-escalation vulnerability (CVE-2019-9694). The issue affects SEE installations that are used to manage BitLocker, with local attack vector and elevated privileges as described in CVSS metrics (base score 7.8 CV...

Symantec Endpoint Encryption Privilege Escalation

SUMMARY Symantec has released an update to address an issue that was discovered in the Symantec Endpoint Encryption product. AFFECTED PRODUCTS Symantec Endpoint Encryption --- CVE | Affected Versions | Remediation CVE-2019-9694 | Prior to SEE 11.2.1 MP1 | Upgrade to SEE 11.2.1 MP1 ISSUES...

Google Chrome OS Malware Check Bypass Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An operating system malware check bypass vulnerability exists in Google Chrome. The vulnerability stems from an improperly set SEEMASKFLAGNOUI flag for file downloa...

Worst-Case Thinking Breeds Fear and Irrationality

Here's a crazy story from the UK. Basically, someone sees a man and a little girl leaving a shopping center. Instead of thinking "it must be a father and daughter, which happens millions of times a day and is perfectly normal," he thinks "this is obviously a case of child abduction and I must ale...

CVE-2018-10404

An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and procInfo. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe...

Code injection

An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and procInfo. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe...

CVE-2018-10404

An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and procInfo. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe...

CVE-2018-10404

CVE-2018-10404 affects Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign and procInfo. A maliciously crafted Universal/Fat binary can bypass third‑party code signing checks, causing unsigned code to be executed while a legitimate Apple-signed Mach‑O in a Fat/Universal bundle is believed...

CVE-2018-10404

An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and procInfo. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe...

see-theme.com XSS vulnerability

Open Bug Bounty ID: OBB-604833 Description| Value ---|--- Affected Website:| see-theme.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-13839

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Spotlight" component. It allows local users to see results for other users' files...

Null pointer dereference

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can result in a NullPointerException that can lead to a privilege escalation scenario...

Design/Logic Flaw

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a denial of service DoS attack, which is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting...

CVE-2017-15526

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can result in a NullPointerException that can lead to a privilege escalation scenario...

CVE-2017-15526

Symantec Endpoint Encryption (SEE) Drive Encryption client prior to 11.1.3 MP1 is affected by a null pointer dereference that can lead to privilege escalation and a denial of service. The issue affects SEE Drive Encryption Client on Windows; root cause is a null pointer dereference/backreference ...

CVE-2017-15525

CVE-2017-15525 affects Symantec Endpoint Encryption (SEE) components prior to version 11.1.3 MP1. The connected Nessus entry specifies that the drive-encryption client on Windows installed before 11.1.3 MP1 is vulnerable to a denial-of-service (DoS) condition and a NULL pointer dereference that c...

CVE-2017-13683

Symantec Endpoint Encryption (SEE) prior to 11.1.3HF3 contains a kernel memory leak vulnerability (memory resource leak). The issue is addressed in SEE 11.1.3HF3 and in Symantec Encryption Desktop (SED) 10.4.1 MP2HF1; updating to these versions mitigates the vulnerability. CNVD/SEC sources descri...

CVE-2017-13675

A denial of service DoS attack in Symantec Endpoint Encryption before SEE 11.1.3HF2 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network...

CVE-2017-13675

A denial of service DoS attack in Symantec Endpoint Encryption before SEE 11.1.3HF2 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network...