2018

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS b

Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation.

An elevation of privilege vulnerability in the Qualcomm kyro L2 driver. Product: Android. Versions: Android kernel. Andr

An elevation of privilege vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android

In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when

An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver (ATMFD.dll) when it fails to pr

A version of the SymEvent Driver that shipped with Symantec Endpoint Protection 12.1 RU6 MP6 and earlier fails to proper

In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic checks

IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain

An exploitable code execution vulnerability exists in the authentication functionality of FreeRDP 2.0.0-beta1+android11.

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "

PrinterOn Enterprise 4.1.3 stores the Active Directory bind credentials using base64 encoding, which allows local users

Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script

An authentication weakness vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to recover

A Time-of-Check Time-of-Use privilege escalation vulnerability in Trend Micro Maximum Security (Consumer) 2018 could all

A race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to a Use After Free scena

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "IOFireWireA

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "NVIDIA Grap

Canvas allows the use of the "feDisplacementMap" filter on images loaded cross-origin. The rendering by the filter is va

In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling

Due to a race condition in a bus driver, a double free in msm_bus_floor_vote_context() can potentially occur in all Andr

Due to a race condition in the QTEECOM driver in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows

An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vuln

An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly ha

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regis

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual regis

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "

A race condition in the nginx module in Phusion Passenger 3.x through 5.x before 5.3.2 allows local escalation of privil

Due to a race condition while processing the power stats debug file to read status, a double free condition can occur in

Due to a race condition in a camera driver ioctl handler in Android releases from CAF using the linux kernel (Android fo

A race condition exists in a driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS

Due to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux kernel (Android for MSM,

An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condit

A buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape sequences. A malicious ter

VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitatio

The Notes Client Single Logon feature in IBM Notes 8.0, 8.0.1, 8.0.2, 8.5, 8.5.1, 8.5.2, 8.5.3, and 9.0 on Windows allow

Vulnerability in the Oracle Order Management component of Oracle E-Business Suite (subcomponent: Product Diagnostic Tool

Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privil

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly san

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The Passcode feature allows authentication

An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. The Passcode feature allows authenticat

The MOTD update script in the base-files package in Ubuntu 18.04 LTS before 10.1ubuntu2.2, and Ubuntu 18.10 before 10.1u