CVE-2026-16006

Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the driver's verification, potentially providing further insight into the kernel memory layout.Refer t...

EUVD-2026-72625

Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uninitialized memory via a crafted IOCTL request that bypasses the driver's security verification mechanism. Refer to the ' Security Update for Armour...

EUVD-2026-72621

Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the driver's verification, potentially providing further insight into the kernel memory layout.Refer t...

Terminator

Terminator 复现 Spyboy 的技术，即通过滥用 zam64.sys 驱动来终止所有 EDR/XDR/AV 进程 Spyboy 曾以 3,000 美元的价格出售 Terminator 软件 了解更多详情 样本来源于 loldrivers 用法 编译好的版本可以在 此处 找到 将驱动 Terminator.sys 放在与可执行文件相同的路径下 以管理员身份运行该程序 保持程序运行，以防止服务重启反恶意软件 技术细节 该驱动包含某种保护机制，仅允许受信任的进程 ID 发送 IOCTL。如果不将你的进程 ID 添加到受信任列表，你每次都会收到'Access...

EUVD-2026-71685

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a hard-coded credentials vulnerability in DirectIo64.sys that allows local attackers to perform arbitrary physical memory writes by extracting an 8-byte key embedded ...

SUSE CVE-2019-10063

Flatpak before 1.0.8, 1.1.x and 1.2.x before 1.2.4, and 1.3.x before 1.3.1 allows a sandbox bypass. Flatpak versions since 0.8.1 address CVE-2017-5226 by using a seccomp filter to prevent sandboxed apps from using the TIOCSTI ioctl, which could otherwise be used to inject commands into the...