2016 CVEs (page 37)
Page 37 of 94 — CVEs published in 2016, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-10027 | Medium | 5.9 | 2017-01-12 | Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass… |
CVE-2016-8606 | Critical | 9.8 | 2017-01-12 | The REPL server (--listen) in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack. |
CVE-2016-8605 | Medium | 5.3 | 2017-01-12 | The mkdir procedure of GNU Guile temporarily changed the process' umask to zero. During that time window, in a multithreaded application, other threads could e… |
CVE-2016-8221 | High | 7.0 | 2017-01-12 | Privilege Escalation in Lenovo XClarity Administrator earlier than 1.2.0, if LXCA is used to manage rack switches or chassis with embedded input/output modules… |
CVE-2016-7791 | Critical | 9.8 | 2017-01-12 | Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload an evil 'exploit.tar.gz' file to the websit… |
CVE-2016-7790 | Critical | 9.8 | 2017-01-12 | Exponent CMS 2.3.9 suffers from a remote code execution vulnerability in /install/index.php. An attacker can upload 'php' file to the website through uploader_… |
CVE-2016-8475 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the HTC input driver could enable a local malicious application to access data outside of its permission levels. Thi… |
CVE-2016-8474 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission le… |
CVE-2016-8473 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside of its permission le… |
CVE-2016-8472 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2016-8471 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2016-8470 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2016-8469 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permission levels. This i… |
CVE-2016-8468 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context of a privileged proce… |
CVE-2016-8466 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8465 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8464 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8463 | Medium | 5.5 | 2017-01-12 | A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause a device hang or reb… |
CVE-2016-8462 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as… |
CVE-2016-8461 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as… |
CVE-2016-8460 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8459 | Critical | 9.8 | 2017-01-12 | Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: Android. V… |
CVE-2016-8458 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the con… |
CVE-2016-8457 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8456 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8455 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8454 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8453 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8452 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8451 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the con… |
CVE-2016-8450 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8449 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8448 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to ex… |
CVE-2016-8447 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to ex… |
CVE-2016-8446 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to ex… |
CVE-2016-8445 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local malicious application to ex… |
CVE-2016-8444 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-8443 | High | 7.8 | 2017-01-12 | Possible unauthorized memory access in the hypervisor. Incorrect configuration provides access to subsystem page tables. Product: Android. Versions: Kernel 3.1… |
CVE-2016-8442 | High | 7.8 | 2017-01-12 | Possible unauthorized memory access in the hypervisor. Lack of input validation could allow hypervisor memory to be accessed by the HLOS. Product: Android. Ver… |
CVE-2016-8441 | High | 7.8 | 2017-01-12 | Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Product: Android. Versions: Kernel 3.18. Andr… |
CVE-2016-8440 | Critical | 9.8 | 2017-01-12 | Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite. Product: Android… |
CVE-2016-8439 | Critical | 9.8 | 2017-01-12 | Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. Versions: Kernel 3… |
CVE-2016-8438 | Critical | 9.8 | 2017-01-12 | Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass (Peripheral Image Loa… |
CVE-2016-8437 | Critical | 9.8 | 2017-01-12 | Improper input validation in Access Control APIs. Access control API may return memory range checking incorrectly. Product: Android. Versions: Kernel 3.18. And… |
CVE-2016-8436 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8435 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8434 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2016-8433 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-8432 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8431 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8430 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8429 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8428 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8427 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8426 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8425 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8424 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-8423 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2016-8422 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2016-8415 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8412 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-8398 | Critical | 9.8 | 2017-01-12 | Unauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS security context exists in the UE. Product: Android. Versions: Ker… |
CVE-2016-8410 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8409 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8408 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8407 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8406 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8405 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8404 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8403 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8402 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8401 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local mali… |
CVE-2016-8400 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application to access data outside of its permissi… |
CVE-2016-8399 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary code within the cont… |
CVE-2016-8397 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8396 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2016-8395 | Medium | 4.7 | 2017-01-12 | A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which may require reflashi… |
CVE-2016-8394 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the con… |
CVE-2016-8393 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the con… |
CVE-2016-8392 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-8391 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-6791 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2016-6790 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrary code within the… |
CVE-2016-6789 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrary code within the… |
CVE-2016-6788 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2016-6785 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-6784 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-6783 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-6782 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-6781 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the k… |
CVE-2016-6780 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context o… |
CVE-2016-6779 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context o… |
CVE-2016-6778 | High | 7.0 | 2017-01-12 | An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code within the context o… |
CVE-2016-6777 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-6776 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-6775 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2016-6774 | Medium | 4.7 | 2017-01-12 | An information disclosure vulnerability in Package Manager could enable a local malicious application to bypass operating system protections that isolate appli… |
CVE-2016-6773 | Medium | 5.5 | 2017-01-12 | An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its permissio… |
CVE-2016-6772 | High | 7.8 | 2017-01-12 | An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code within the context of a privileged proces… |
CVE-2016-6771 | Medium | 5.3 | 2017-01-12 | An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. This issue… |