The vulnerability of the Kernel component in Mac OS X and iOS operating systems allows attackers to execute arbitrary code in a privileged context.

The vulnerability of the Kernel component in Mac OS X and iOS operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context racing environment through a specially created...

CVE-2015-5232: Concurrent Execution using Shared Resource with Improper Synchronization

Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197...

CVE-2016-3066

The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard...

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone technology’s authentication mode for Qualcomm Secure Execution Environment for Android, as found in the CAF repository, stems from synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker operating remotely to...

The vulnerability of Qualcomm’s TrustZone microprogramming software technology allows for breaches of the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone technology snooping mode of Qualcomm’s Secure Execution Environment for Android, as found in the CAF repository, stems from synchronization errors when using a common resource. Exploiting this vulnerability could allow a malicious actor, operating remotely, to...

The vulnerability of the TrustZone technology (QFPROM mode of Qualcomm Secure Execution Environment) allows for breaches of the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the TrustZone technology QFPROM mode of Qualcomm Secure Execution Environment for Android from the CAF repository arises due to synchronization errors when using a common resource. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality,...

PT-2017-3959

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions MDM9150 through MDM9650 Qualcomm Snapdragon Compute versions MDM9150 through MDM9650 Qualcomm Snapdragon Consumer IOT versions MDM9150 through MDM9650 Qualcomm Snapdragon Industrial IOT versions MDM9150 throug...

Update Rollup 13 for System Center 2012 R2 Data Protection Manager

Update Rollup 13 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 13 for Microsoft System Center 2012 R2 Data Protection Manager. It also contains the installation instructions for this update. Note Existing Data...

Fatal vulnerability will allow an attacker to bypass Apple's OTR signature verification and steal your iCloud keychain information-vulnerability warning-the black bar safety net

! Background content In the analysis of the iOS platform and sandbox escape about the attack surface when we in the iCloud keychain sync feature of OTR implementation has discovered a serious security vulnerability. iCloud keychain sync feature allows users in a secure manner across the device to...

Race condition

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys where user can trigger a race condition due to lack of synchronization in two functions leading to a denial of service or potential escalation of privileges...

CVE-2017-0343

CVE-2017-0343 affects the NVIDIA Windows GPU Display Driver (kernel mode layer nvlddmkm.sys). The connected sources confirm a race condition due to lack of synchronization in the nvlddmkm.sys handler, which can lead to denial of service or potential privilege escalation. Affected component is the...

CVE-2016-9256: Concurrent Execution using Shared Resource with Improper Synchronization

In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the rolemap is not reloaded between the time the permissions are changed and the time of the user's next request. This is a race condition that occurs rarely in normal...

Security Bulletin: NVIDIA GPU Display driver contains multiple vulnerabilities in the kernel mode layer handler

Vulnerability Details The following sections summarize the vulnerabilities and lists their CVSS risk assessments. CVE-2017-0341 NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape, where user provided input can trigger an acces...

EulerOS 2.0 SP2 : ntp (EulerOS-SA-2017-1024)

According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that when ntp is configured with rate limiting for all associations the limits are also applied to responses received from its...

EulerOS 2.0 SP1 : ntp (EulerOS-SA-2017-1023)

According to the versions of the ntp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was found that when ntp is configured with rate limiting for all associations the limits are also applied to responses received from its...

Based on jemalloc Android exploit skills----CENSUS-bug warning-the black bar safety net

Background description jemalloc-related research argp and huku in 2012 in Phrack published on: jemalloc memory allocator a separate use of themade-based on FreeBSD libc POC. argp and huku in 2012 BlackHat published: in Firefo play bad jemalloc metadata. argp in 2015 INFILTRATE on jemalloc exploit...

[SECURITY] Fedora 24 Update: ntp-4.2.6p5-44.fc24

The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which continuously adjusts system time and utilities used to query and configure the ntpd daemon. Perl scripts ntp-wait and ntptrace are in the ntp-perl...

SAP SQL Anywhere Buffer Overflow Vulnerability

SAP SQL Anywhere is a data management and enterprise synchronization solution from SAP, Germany. The solution provides database management and data movement technology for rapid development and deployment of database-enabled applications. A buffer overflow vulnerability exists in the MobiLink...

CVE-2016-3106: Concurrent Execution using Shared Resource with Improper Synchronization

Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to execute arbitrary code in a privileged context

The vulnerability of the Kernel component in iOS and Mac OS X operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code in a privileged context racing environment through a specially created...