CVE-2025-66678

CVE-2025-66678 In Hardware Read & Write Utility v1.25.11.26, the driver exposed abritrary MSR read and write, as well as phsyical memory read and write through MmMapIoSpace, both of which enable kernel code execution. PoC Detail The PoC will swap the primary token of the current process to become...

CVE-2025-66678

An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write operations via a crafted request...

PT-2026-22963

An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write operations via a crafted request...

Hardware Read & Write Utility security vulnerability

The Hardware Read & Write Utility is a hardware register modification tool developed by Nil Hardware Editor’s individual developers. Versions of the Hardware Read & Write Utility prior to v1.25.11.26 contained security vulnerabilities. These vulnerabilities stemmed from defects in the HwRwDrv.sys...

CVE-2025-66678: Improper Neutralization of Special Elements used in an SQL Command

An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write operations via a crafted request...

CVE-2025-66678

An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write operations via a crafted request...

CVE-2025-66678

CVE-2025-66678 affects Nil Hardware Editor’s Hardware Read & Write Utility (HwRwDrv.sys) up to v1.25.11.26. A crafted request can trigger arbitrary read/write operations, as described across multiple sources (NVD, RH, EUVD, OSV, CNNVD, etc.). The underlying issue is located in HwRwDrv.sys and lea...

CVE-2025-66678

An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write operations via a crafted request...

UBUNTU-CVE-2025-68347

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdepread could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header...