CVE-2024-34332

2024-06-1016:15:13

[email protected]

web.nvd.nist.gov

sisoftware sandra

privilege escalation

buffer overflow

kernel driver

deviceiocontrol windows api

cve-2024-34332} .

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

An issue in SiSoftware SANDRA v31.66 (SANDRA.sys 15.18.1.1) and before allows an attacker to escalate privileges via a crafted buffer sent to the Kernel Driver using the DeviceIoControl Windows API.

References

belong2yourself.github.io/vulnerabilities/docs/SANDRA/Elevation-of-Privileges/readme/