CVE-2026-47517

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a crafted ioctl. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47517

The NVIDIA GPU Display Driver for Linux contains a vulnerability in its kernel mode driver . A local user can trigger a null pointer dereference by submitting a crafted ioctl . Successful exploitation of this flaw may result in a denial of service . No specific exploit details or remediation step...

CVE-2026-47517

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a crafted ioctl. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47517

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a crafted ioctl. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47561

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where the size of an ioctl input buffer is not validated, allowing an unprivileged caller to trigger an out-of-bounds write in kernel memory. A successful exploit of this vulnerability might lead to code...

CVE-2026-97983

A flaw was found in the Linux kernel's VDUSE vDPA Device in Userspace subsystem. A local user can cause a Denial of Service DoS by issuing specific 32-bit compatibility input/output control ioctl requests. Due to improper command dispatching, successful requests allocate file descriptors but retu...

CVE-2026-97961

A flaw was found in the Linux kernel's perf subsystem, which can lead to a Denial of Service DoS. A local user can trigger this issue by manipulating performance monitoring event limits through I/O control ioctl requests. When the event limit expires, the kernel improperly removes an entry from a...

kernel: i2c: stub: Reject I2C block transfers with invalid length

A flaw was found in the Linux kernel's i2c-stub driver. A local user with access to the /dev/i2c- device can exploit this vulnerability by issuing an I2C System Management Bus SMBus input/output control ioctl command with a specially crafted block transfer length. This invalid length can cause th...

Linux Distros Unpatched Vulnerability : CVE-2026-47561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where the size of an ioctl input buffer is not validated, allowing an...

Linux Distros Unpatched Vulnerability : CVE-2026-47517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a...

CVE-2026-79417

Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle access restrictions via a TOCTOU condition in IRPMJCREATE and send a crafted IOCTL 0x9C4024A8 request, causing denial-of-service...

CVE-2026-29923

CVE-2026-29923 - 任意の物理メモリマッピングによるローカル権限昇格 pstrip64.sys カーネルドライバは、低権限ユーザーが任意の範囲の物理メモリを自身の仮想アドレス空間にマッピングできる IOCTL を公開しています。このプリミティブにより、システムの物理 RAM への完全な読み取り/書き込みアクセスが可能となり、攻撃者はカーネルの重要な構造を改変し、NT AUTHORITY\SYSTEM への権限昇格を実行できます。 このドライバはデバイスオブジェクト \Device\PSTRIP64 とシンボリックリンク \DosDevices\PSTRIP64...

CVE-2021-27965

CVE-2021-27965 CVE-2021-27965를 악용하여 시스템 명령을 실행하여 LPE를 수행하는 간단한 PoC. https://vulners.com/cve/CVE-2021-27965 서명된 MICSYS Windows 드라이버MsIo64.sys에서 전체 로컬 시스템의 손상으로 이어질 수 있는 문제가 발견되었습니다. 드라이버의 ioctl 디스패치 루틴은 all IOCTL 코드에서 스택 기반 버퍼 오버플로우가 발생하며 사용자 제공 버퍼에 대한 검증도 부족합니다. IOCTL 누구나 핸들을 생성하고 이러한 IOCTL 코드에...

CVE-2025-61155

CVE-2025-61155: GameDriverX64.sys의 임의 프로세스 종료 https://github.com/user-attachments/assets/baf76601-94de-49a6-b4fd-e72f63112fab 개요 이 저장소에는 CVE-2025-61155에 대한 보안 권고와 PoC가 포함되어 있습니다. GameDriverX64.sys 안티치트 드라이버는 취약한 IOCTL 핸들러를 통해 모든 로컬 사용자가 임의의 프로세스를 종료할 수 있게 합니다. 개념 증명 PoC 소스 코드는 지정된 프로세스를 종료하기 위해...

CVE-2026-79417

Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle access restrictions via a TOCTOU condition in IRPMJCREATE and send a crafted IOCTL 0x9C4024A8 request, causing denial-of-service...

EUVD-2026-89424

Improper Access Control in ArgusMonitor.sys in Argotronic eGbR ArgusMonitor 7.4.02 and earlier allows local, low-privileged users to bypass device handle access restrictions via a TOCTOU condition in IRPMJCREATE and send a crafted IOCTL 0x9C4024A8 request, causing denial-of-service...

cormem-read-poc

면책 조항 : 이 프로젝트는 교육 및 보안 연구 목적으로만 제작되었습니다. 소유하고 있거나 명시적 테스트 허가를 받은 시스템에서만 사용하십시오. 무단 사용은 귀하의 관할권에서 불법일 수 있습니다. cordrvexploit — CVE-2026-38194 취약점 이 도구는 Teledyne Digital Imaging Sapera Memory Managerv9.0.0.0 이하의 취약점인 CVE-2026-38194를 시연합니다. CORMEM.SYS 커널 드라이버는 액세스 제어 검사 없이 IOCTL을 노출하므로, 표준 권한 없는 사용자...

CVE-2026-14960-CVE-2026-14961

Pegatron TdeIo64 드라이버 tdeio64.sys 권한 상승 취약점 | ---|--- CVE ID| CVE-2026-14960, CVE-2026-14961 공급업체| Pegatron Corporation 제품| TdeIo 드라이버 tdeio64.sys 장치 인터페이스| \.\TdeIo 취약점 유형| 부적절한 접근 제어 CWE-284, 임의 커널 메모리 읽기/쓰기 CWE-787/CWE-125, 보호되지 않은 I/O 포트 접근 영향| SYSTEM 권한 상승, 하드웨어 수준 침해 공격 벡터| 로컬 필요 권한| 낮음 모든...

CVE-2026-46215-POC

CVE-2026-46215: DRM GEM changehandle Use-After-Free 비특권 LPE DRM 코어 ioctl DRMIOCTLGEMCHANGEHANDLEdrmgemchangehandleioctl, ioctl nr 0xD2의 사용 후 해제use-after-free를 통한 로컬 권한 상승. 렌더 노드/dev/dri/renderD에 접근 가능한 모든 사용자에게 도달 가능하며, 모든 주요 데스크톱 배포판에서 systemd-logind가 활성 세션에 부여함. 이 저장소의 체인은 비특권 사용자로부터 암호 없는 root...

0xM0nCrush

0xM0nCrush クロスバージョン対応のWindowsプロセスターミネーター。署名済みのHONOR カーネルドライバ（MonProcessEX.sys）を読み込み、すべての対象プロセスの PIDを解決し、単一のIOCTLを通じてカーネルコンテキストからプロセスを終了させます。 カーネルオフセット不要、PDBダウンロード不要、ビルド固有のシェルコード不要 - この手法はすべてのWindows 10およびWindows 11ビルドで同一に動作します。 このツールは単一の自己完結型実行ファイルです。サービスコントロールマネージャーを...