deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-0246
Published: 2017-05-12
Description: The Graphics Component in the kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted application or in Windows 7 for x64-based Systems and later, cause denial of service, aka "Win32k Elevation of Privilege Vulnerability."
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98108; http://www.securitytracker.com/id/1038449; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0246
CVE: CVE-2017-0247
Published: 2017-05-12
Description: A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims that the issue is that the TextEncoder.EncodeCore function in the System.Text.Encodings.Web package in ASP.NET Core Mvc before 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to cause a denial of service by leveraging failure to properly calculate the length of 4-byte characters in the Unicode Non-Character range.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/aspnet/Announcements/issues/239; https://technet.microsoft.com/en-us/library/security/4021279.aspx; https://www.sidertia.com/Home/Community/Blog/2017/05/18/ASPNET-Core-Unicode-Non-Char-Encoding-DoS
CVE: CVE-2017-0248
Published: 2017-05-12
Description: Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-295
References: http://www.securityfocus.com/bid/98117; http://www.securitytracker.com/id/1038458; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0248
CVE: CVE-2017-0249
Published: 2017-05-12
Description: An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20
References: https://github.com/aspnet/Announcements/issues/239; https://github.com/aspnet/Announcements/issues/239
CVE: CVE-2017-0254
Published: 2017-05-12
Description: Microsoft Word 2007, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Office for Mac 2011, Office for Mac 2016, Microsoft Office Web Apps 2010 SP2, Office Web Apps Server 2013 SP1, Word 2013 RT SP1, Word 2013 SP1, Word Automation Services on Microsoft SharePoint Server 2013 SP1, Office Word Viewer, SharePoint Enterprise Server 2016, and Word 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-0264 and CVE-2017-0265.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98101; http://www.securitytracker.com/id/1038443; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0254
CVE: CVE-2017-0255
Published: 2017-05-12
Description: Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request, aka "Microsoft SharePoint XSS Vulnerability".
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/98107; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0255; http://www.securityfocus.com/bid/98107
CVE: CVE-2017-0256
Published: 2017-05-12
Description: A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20
References: https://github.com/aspnet/Announcements/issues/239; https://github.com/aspnet/Announcements/issues/239
CVE: CVE-2017-0258
Published: 2017-05-12
Description: The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows authenticated attackers to obtain sensitive information via a specially crafted document, aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-0175, CVE-2017-0220, and CVE-2017-0259.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98112; http://www.securitytracker.com/id/1038446; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0258
CVE: CVE-2017-0259
Published: 2017-05-12
Description: The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows authenticated attackers to obtain sensitive information via a specially crafted document, aka "Windows Kernel Information Disclosure Vulnerability," a different vulnerability than CVE-2017-0175, CVE-2017-0220, and CVE-2017-0258.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98113; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0259; https://www.exploit-db.com/exploits/42007/
CVE: CVE-2017-0261
Published: 2017-05-12
Description: Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0262 and CVE-2017-0281.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://www.securityfocus.com/bid/98104; http://www.securitytracker.com/id/1038444; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0261
CVE: CVE-2017-0262
Published: 2017-05-12
Description: Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0281.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/98279; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0262; http://www.securityfocus.com/bid/98279
CVE: CVE-2017-0263
Published: 2017-05-12
Description: The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://www.securityfocus.com/bid/98258; http://www.securitytracker.com/id/1038449; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0263
CVE: CVE-2017-0264
Published: 2017-05-12
Description: Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-0254 and CVE-2017-0265.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98282; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0264; http://www.securityfocus.com/bid/98282
CVE: CVE-2017-0265
Published: 2017-05-12
Description: Microsoft PowerPoint for Mac 2011 allows a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-0254 and CVE-2017-0264.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98285; http://www.securitytracker.com/id/1038448; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0265
CVE: CVE-2017-0266
Published: 2017-05-12
Description: A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Remote Code Execution Vulnerability."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/98276; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0266; http://www.securityfocus.com/bid/98276
CVE: CVE-2017-0267
Published: 2017-05-12
Description: Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka "Windows SMB Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274, CVE-2017-0275, and CVE-2017-0276.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98259; http://www.securitytracker.com/id/1038432; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE: CVE-2017-0268
Published: 2017-05-12
Description: Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka "Windows SMB Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0267, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274, CVE-2017-0275, and CVE-2017-0276.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98261; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0268
CVE: CVE-2017-0269
Published: 2017-05-12
Description: The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0273 and CVE-2017-0280.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/98263; http://www.securitytracker.com/id/1038433; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE: CVE-2017-0270
Published: 2017-05-12
Description: Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka "Windows SMB Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0267, CVE-2017-0268, CVE-2017-0271, CVE-2017-0274, CVE-2017-0275, and CVE-2017-0276.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98264; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0270
CVE: CVE-2017-0271
Published: 2017-05-12
Description: Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka "Windows SMB Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0274, CVE-2017-0275, and CVE-2017-0276.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98265; http://www.securitytracker.com/id/1038432; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE: CVE-2017-0272
Published: 2017-05-12
Description: The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it handles certain requests, aka "Windows SMB Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0277, CVE-2017-0278, and CVE-2017-0279.
CVSS Score: 8.1 (HIGH)
References: http://www.securityfocus.com/bid/98260; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0272
CVE: CVE-2017-0273
Published: 2017-05-12
Description: The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0280.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/98274; http://www.securitytracker.com/id/1038433; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE: CVE-2017-0274
Published: 2017-05-12
Description: Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka "Windows SMB Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0275, and CVE-2017-0276.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98266; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0274
CVE: CVE-2017-0275
Published: 2017-05-12
Description: Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka "Windows SMB Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274, and CVE-2017-0276.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98267; http://www.securitytracker.com/id/1038432; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE: CVE-2017-0276
Published: 2017-05-12
Description: Microsoft Server Message Block 1.0 (SMBv1) allows an information disclosure vulnerability in the way that Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 handles certain requests, aka "Windows SMB Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-0267, CVE-2017-0268, CVE-2017-0270, CVE-2017-0271, CVE-2017-0274, and CVE-2017-0275.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/98268; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0276
CVE: CVE-2017-0277
Published: 2017-05-12
Description: The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it handles certain requests, aka "Windows SMB Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0272, CVE-2017-0278, and CVE-2017-0279.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98270; http://www.securitytracker.com/id/1038430; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE: CVE-2017-0278
Published: 2017-05-12
Description: The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it handles certain requests, aka "Windows SMB Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0272, CVE-2017-0277, and CVE-2017-0279.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98271; http://www.securitytracker.com/id/1038430; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE: CVE-2017-0279
Published: 2017-05-12
Description: The Microsoft Server Message Block 1.0 (SMBv1) server on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to execute remote code by the way it handles certain requests, aka "Windows SMB Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0272, CVE-2017-0277, and CVE-2017-0278.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/98272; http://www.securitytracker.com/id/1038430; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02
CVE: CVE-2017-0280
Published: 2017-05-12
Description: The Microsoft Server Message Block 1.0 (SMBv1) allows denial of service when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability". This CVE ID is unique from CVE-2017-0269 and CVE-2017-0273.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/98273; https://ics-cert.us-cert.gov/advisories/ICSMA-18-058-02; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0280
CVE: CVE-2017-0281
Published: 2017-05-12
Description: Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint Server 2010 SP2, Word 2016, and Skype for Business 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka "Office Remote Code Execution Vulnerability". This CVE ID is unique from CVE-2017-0261 and CVE-2017-0262.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/98297; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0281; http://www.securityfocus.com/bid/98297
CVE: CVE-2016-10274
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30202412. References: M-ALPS02897901.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98145; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98145
CVE: CVE-2016-10275
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-34514954. References: QC-CR#1009111.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98146; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98146
CVE: CVE-2016-10276
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-32952839. References: QC-CR#1094105.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98148; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98148
CVE: CVE-2016-10277
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33840490.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98149; https://source.android.com/security/bulletin/2017-05-01; https://www.exploit-db.com/exploits/42601/
CVE: CVE-2016-10280
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175767. References: M-ALPS02696445.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98157; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98157
CVE: CVE-2016-10281
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175647. References: M-ALPS02696475.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98158; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98158
CVE: CVE-2016-10282
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-33939045. References: M-ALPS03149189.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98159; https://source.android.com/security/bulletin/2017-05-01; http://www.securityfocus.com/bid/98159
CVE: CVE-2016-10283
Published: 2017-05-12
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32094986. References: QC-CR#2002052.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/98160; https://source.android.com/security/bulletin/2017-05-01; https://www.codeaurora.org/stack-overflow-wifi-driver-function-wlanhddchangestation-cve-2016-10283