CVE-2020-28922

2020-11-2717:51:00

mitre

www.cve.org

devid espenschied

pc analyser

arbitrary physical memory

low-privilege users

ioctl functionality

kernel driver

code execution

privilege escalation

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

35.3%

JSON

An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write arbitrary physical memory. This could lead to arbitrary Ring-0 code execution and escalation of privileges.