CVE-2024-21338-Exploit

Exploit CVE-2024-21338 Descripción del proyecto Este es un POC para CVE-2024-21338, una vulnerabilidad de elevación de privilegios en el controlador Windows AppLocker appid.sys, que fue explotada como 0day por el grupo Lazarus para la elevación de privilegios locales en Windows. Contexto de la...

iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 PoC de escalada de privilegios local Resumen Este proyecto es una prueba de concepto educativa para una vulnerabilidad de Escalada de Privilegios Local LPE en el driver iqvw64e.sys SHA256: 37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9 ...

CVE-2021-27965

CVE-2021-27965 PoC simple para explotar CVE-2021-27965 para LPE mediante la ejecución de cmd del sistema. https://vulners.com/cve/CVE-2021-27965 Se descubrió un problema en el controlador firmado de Windows de MICSYS MsIo64.sys que puede provocar el compromiso de todo el sistema local. La rutina ...

EUVD-2026-76913

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

CVE-2026-90485

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

CVE-2026-90485 IOBit Uninstaller IOCTL Dispatch IURegistryFilter.sys sub_11838 null pointer dereference

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

CVE-2026-90485 IOBit Uninstaller IOCTL Dispatch IURegistryFilter.sys sub_11838 null pointer dereference

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

CVE-2026-90485

A null pointer dereference in the function sub_11838 of the IURegistryFilter.sys driver (IOCTL Dispatch Handler) affects IOBit Uninstaller 15.5.0.11 . A local attacker with low privileges can trigger the flaw without user interaction, resulting in a high-impact denial of service (CVSS 3.1: 5.5 Me...

CVE-2026-90485: NULL Pointer Dereference

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

PT-2026-90722

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub 11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and...

CVE-2026-82628

A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management...

CVE-2026-82628

Colorful iGameCenter 2.0.0.81 contains a vulnerability in the WinRing0x64.sys driver, specifically in the function sub_11504 within the IOCTL Dispatch component. Manipulating the PhysicalAddress/AlignNumber/AlignSize arguments leads to improper privilege management , enabling a local attacker wit...

EUVD-2026-68376

A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management...

CVE-2026-82628 Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management

A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management...

CVE-2026-82628 Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management

A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management...

CVE-2026-82628: Improper Privilege Management

A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management...

PT-2026-83713

Name of the Vulnerable Software and Affected Versions Colorful iGameCenter version 2.0.0.81 Description Improper privilege management exists within the IOCTL Dispatch component of the WinRing0x64.sys library. A local attacker can exploit this by manipulating the PhysicalAddress, AlignNumer, and...

SUSE CVE-2026-68455

In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...

CVE-2026-68455

In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...