CVE-2016-3943

Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which allows local users to gain SYSTEM privileges by modifying an executable module.

• CWE-276

• http://packetstormsecurity.com/files/136606/Panda-Endpoint-Administration-Agent-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Apr/24Mailing List, Third Party Advisory
• https://www.exploit-db.com/exploits/39671/Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/136606/Panda-Endpoint-Administration-Agent-Privilege-Escalation.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Apr/24Mailing List, Third Party Advisory
• https://www.exploit-db.com/exploits/39671/Third Party Advisory, VDB Entry

Published

Apr 18, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3936The MediaTek video driver in Android before 2016-10-05 allow…
• CVE-2016-3937The MediaTek video driver in Android before 2016-10-05 allow…
• CVE-2016-3938drivers/video/msm/mdss/mdss_mdp_overlay.c in the Qualcomm vi…
• CVE-2016-3939drivers/video/msm/mdss/mdss_debug.c in the Qualcomm video dr…
• CVE-2016-3940The Synaptics touchscreen driver in Android before 2016-10-0…
• CVE-2016-3941Buffer overflow in the AStreamPeekStream function in input/s…
• CVE-2016-3944UpdateAgent in Lenovo Accelerator Application allows man-in-…
• CVE-2016-3945Multiple integer overflows in the (1) cvt_by_strip and (2) c…
• CVE-2016-3946SAP Console (aka SAPConsole) 7.30 allows local users to disc…
• CVE-2016-3947Heap-based buffer overflow in the Icmp6::Recv function in ic…
• CVE-2016-3948Squid 3.x before 3.5.16 and 4.x before 4.0.8 improperly perf…
• CVE-2016-3949Siemens SIMATIC S7-300 Profinet-enabled CPU devices with fir…