CVE-2021-29337

CVE-2021-29337 - MODAPI.sys 中的权限提升 MSI Dragon Center 概述 受影响产品: MSI Dragon Center 受影响版本: 2.0.104.0 CVE MITRE 描述 Dragon Center 中的易受攻击的内核驱动程序 MODAPI.sys 暴露了 IOCTL 0x9C406104，该 IOCTL 允许低权限用户通过调用几个驱动程序例程之一（MmMapIoSpace）直接将物理内存映射到虚拟地址空间，从而与物理内存直接交互。 通过 DeviceIoControl 发送有效的输入和输出缓冲区，可以在最新的 Windows 10...

KSLDBYOVDARK

KSLDBYOVD 참고: KslKatz 및 KslDump. KslD.sys 일명 MpKslDrv.sys는 한때 Microsoft 안티멀웨어Microsoft Defender 바이러스 백신, 구형 Windows 버전의 Windows Defender 바이러스 백신, Microsoft Security Essentials, System Center Endpoint Protection 등 포함의 안티루트킷 도구 드라이버 중 하나였습니다. ARK안티루트킷 드라이버로서, 이 드라이버는 임의의 파일 이름, 임의의 서비스 이름, 임의의 디바이스...

CVE-2026-64529

A flaw was found in the Linux kernel's QAT QuickAssist Technology driver. Unused character devices and IOCTLs Input/Output Control were exposed, which increased the potential attack surface. Removing these interfaces reduces the risk of future vulnerabilities and improves the overall security...

CVE-2019-25764

UNSUPPORTED WHEN ASSIGNED Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation. Refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers ...

PT-2025-47354

Name of the Vulnerable Software and Affected Versions Fortinet FortiClientWindows versions 7.2.0 through 7.2.9 Fortinet FortiClientWindows versions 7.4.0 through 7.4.3 Description A flaw exists in Fortinet FortiClientWindows that involves an exposed IOCTL with insufficient access control. This...

CVE-2025-26125

An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges...

Improper access control

Patriot Viper RGB Driver 1.1 and prior exposes IOCTL and allows insufficient access control. The IOCTL Codes 0x80102050 and 0x80102054 allows a local user with low privileges to read/write 1/2/4 bytes from or to an IO port. This could be leveraged in a number of ways to ultimately run code with...