CVE-2021-31728

CVE-2021-31727 和 CVE-2021-31728 CVE-2021-31727 的公开参考 暴露无限制的磁盘读/写能力。 CVE-2021-31728 的公开参考 直接暴露任意 ring 0 代码执行。 致谢 Lima X 帮助提供了 SystemBigPoolInformation 思路。...

VulnCheck KEV: CVE-2021-31728

Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to open a handle to .\ZemanaAntiMalware, register itself with the driver by sending IOCTL 0x80002010, allocate executable memory using a flaw in IOCTL 0x80002040, install a...

CVE-2021-31728

Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to open a handle to .\ZemanaAntiMalware, register itself with the driver by sending IOCTL 0x80002010, allocate executable memory using a flaw in IOCTL 0x80002040, install a hook...

Exploit for CVE-2021-31728

CVE-2021-31727 and CVE-2021-31728 Public Reference f...