CVE-2018-8765

The CVE-2018-8765 entry affects 2345 Security Guard 3.6, specifically the 2345NetFirewall.sys driver. The root cause is input value validation failure from IOCTL 0x00222018, allowing a local attacker to cause a denial of service (BSOD) or potentially other unspecified impact. There is no remediat...

CVE-2017-6280

NVIDIA driver contains a possible out-of-bounds read vulnerability due to a leak which may lead to information disclosure. This issue is rated as moderate. Android: A-63851980...

Code injection

In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables using printk calls within the function showfloppy in drivers/block/floppy.c. An attacker can read this information from dmesg and use the addresses to find the locations of kernel...

CVE-2018-0844

The Windows Common Log File System CLFS driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability...

Privilege escalation

The Windows Common Log File System CLFS driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability...

Jiangmin Antivirus Denial of Service Vulnerability (CNVD-2018-03298)

Jiangmin Antivirus is a set of online antivirus software from the Chinese Jiangmin Jiangmin New Technology Company. A security vulnerability exists in the KrnlCall.sys driver file in Jiangmin Antivirus version 16.0.0.100, which is caused by the program failing to validate an input value of IOCtl...

Jiangmin Antivirus Denial of Service Vulnerability (CNVD-2018-03290)

Jiangmin Antivirus is a set of online antivirus software from the Chinese Jiangmin Jiangmin New Technology Company. A security vulnerability exists in the KrnlCall.sys driver file in Jiangmin Antivirus version 16.0.0.100, which is caused by the program failing to validate the input value of IOCtl...

CVE-2018-6770

In Jiangmin Antivirus 16.0.0.100, the driver file KrnlCall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x99008210...

CVE-2018-6784

CVE-2018-6784 affects Jiangmin Antivirus 16.0.0.100 via the KSysCall.sys driver. The issue arises from not validating inputs to IOCTL 0x9A00824C, enabling a local attacker to cause a denial of service (BSOD) or potentially other impact. Multiple sources (NVD, CNVD, Red Hat, CNVD variants) corrobo...

Micropoint Proactive Defense Software Denial of Service Vulnerability (CNVD-2018-02958)

Micropoint proactive defense software is a set of third-generation anti-virus software from China's Oriental Micropoint Micropoint Company. The software uses proactive defense technology to analyze and judge to achieve the purpose of defense against viruses. A security vulnerability exists in the...

CVE-2018-6627

In WatchDog Anti-Malware 2.74.186.150, the driver file ZAMGUARD32.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x80002054...

CVE-2018-6631

The CVE-2018-6631 entry concerns Micropoint Proactive Defense Software 2.0.20266.0146. The vulnerable component is the mp110009.sys driver, where input values from IOCTL 0x80000170 are not validated, enabling a local user to cause a denial of service (BSOD) and potentially other impacts as descri...

CVE-2018-6625

CVE-2018-6625 affects WatchDog Anti-Malware 2.74.186.150. The vulnerability lies in the driver file ZAMGUARD32.SYS, which does not validate input values for IOCTL 0x80002010, allowing a local attacker to trigger a denial of service (BSOD) and potentially other impact. The provided connected recor...

CVE-2018-6632

Summary: CVE-2018-6632 affects Micropoint proactive defense software (v2.0.20266.0146) via its mp110005.sys driver. The vulnerability arises from not validating input values provided to IOCTL 0x80000110, enabling a local attacker to cause a denial of service (BSOD) and potentially other unspecifi...

Improper access control

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate...

CVE-2018-6593

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate...

CVE-2018-6524

In nProtect AVS V4.0 before 4.0.0.39, the driver file TKFsAv.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x220c20...

nProtect AVS Denial of Service Vulnerability (CNVD-2018-02849)

nProtect AVS is security software for blocking malware, spyware, ransomware, and other cyber threats. A denial of service vulnerability exists in the driver file TKFsAv.SYS in nProtect AVS V4.0 4.0.0.38. The vulnerability arises due to an unvalidated input value from IOCtl 0x22045c. A local user...

Input validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40204c...

CVE-2018-6471

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402078...