1521 matches found
CVE-2016-4558
The BPF subsystem in the Linux kernel before 4.5.5 mishandles reference counts, which allows local users to cause a denial of service use-after-free or possibly have unspecified other impact via a crafted application on 1 a system with more than 32 Gb of memory, related to the program reference...
CVE-2016-1804
The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
Memory corruption
The Multi-Touch subsystem in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...
CVE-2016-1804
CVE-2016-1804 affects Apple OS X El Capitan prior to 10.11.5. The Multi-Touch subsystem allows a crafted app to execute arbitrary code in a privileged context or cause a denial of service via memory corruption. The provided documents do not specify patched versions or remediation steps. If presen...
CVE-2016-3713
The msrmtrrvalid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR 0x2f8, which allows guest OS users to read or write to the kvmarchvcpu data structure, and consequently obtain sensitive information or cause a denial of service system crash, via a crafted ioctl call...
CVE-2016-3070
The tracewritebackdirtypage implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with mm/migrate.c, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by...
CVE-2016-0758
Integer overflow in lib/asn1decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data...
CVE-2012-6701
Integer overflow in fs/aio.c in the Linux kernel before 3.4.1 allows local users to cause a denial of service or possibly have unspecified other impact via a large AIO iovec...
CVE-2016-2117
The atl2probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to obtain sensitive information from kernel memory by reading packet data...
CVE-2016-3672
The archpickmmaplayout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the intended restrictions on the ADDRNORANDOMIZE flag, and bypass the ASLR protection mechanism for a setuid...
Lenovo Fingerprint Manager and Touch Fingerprint Privilege Gain Vulnerability
Lenovo Fingerprint Manager and Touch Fingerprint are both products of the Chinese company Lenovo. The former is a set of fingerprint sensor drivers developed for the Thinkpad series; the latter is a set of drivers for acquiring recognized fingerprints. A privilege-acquisition vulnerability exists...
CVE-2016-2393
Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified 1 services and 2 files, which allows local users to gain privileges by invalidating local checks...
Code injection
Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified 1 services and 2 files, which allows local users to gain privileges by invalidating local checks...
CVE-2016-2393
Lenovo Fingerprint Manager before 8.01.57 and Lenovo Touch Fingerprint before 1.00.08 expose a privilege-escalation flaw due to weak ACLs on certain services and files, enabling local attackers to bypass checks. Affected software: Fingerprint Manager (<8.01.57) and Touch Fingerprint (
CVE-2016-2393
Lenovo Fingerprint Manager before 8.01.57 and Touch Fingerprint before 1.00.08 use weak ACLs for unspecified 1 services and 2 files, which allows local users to gain privileges by invalidating local checks...
Apple iOS 9.3 S/Plus – touch password bypass vulnerability-vulnerability warning-the black bar safety net
! Description iOS is developed by Apple Phoneoperating system, published in 2 0 0 7 years use on the iPhone and iPod Touch, and has begun to extend to other Apple devices such as the iPad and Apple TV. With Microsoft's Windows Phone Windows CEand Google's Android systems, Apple does not authorize...
Apple iOS 9.3.1 Passcode Bypass
Document Title: =============== Apple iOS 9.3.1 iPhone 6S & iPhone Plus - 3D Touch Passcode Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1814 Release Date: ============= 2016-04-05 Vulnerability Laboratory ID VL-ID:...
Hacker reveals How to Bypass iPhone 6s Lock Screen Passcode [Video]
Apple gave you a reason to turn your Siri OFF. A critical security flaw in Apple's newest iPhones running the latest version of the iOS operating system allows anyone to bypass the phone's lockscreen and gain access to personal information. The iPhone lockscreen bypass bug only works on the iPhon...
Apple iOS 9.3 S/Plus - Touch Passcode Bypass Vulnerability
Document Title: =============== Apple iOS 9.3 S/Plus - Touch Passcode Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1814 Vulnerability Magazine:...
Apple iOS 9.3 S/Plus - Touch Passcode Bypass Vulnerability
Document Title: =============== Apple iOS 9.3 S/Plus - Touch Passcode Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1814 Vulnerability Magazine:...