950 matches found
FalconEye
FalconEye: Real-time detection software for Windows process injections FalconEye is a windows endpoint detection software for real-time process injections. It is a kernel-mode driver that aims to catch process injections as they are happening real-time. Since FalconEye runs in kernel mode, it...
CVE-2016-7255
CVE-2016-7255 The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted...
aegis
Aegis Kernel-mode process protection driver using ObRegisterCallbacks to strip memory access permissions from handles. Basic implementation that hooks handle creation and removes PROCESSVMREAD/WRITE/OPERATION from unauthorized access attempts. Note: If the GIF doesn't animate, view it directly on...
access_updated
Singular Access Updated fork ofbtbd/access with Zydis-based dynamic pattern finding for Windows 10/11 compatibility A kernel-mode syscall wrapper that enables privileged process operations without requiring handles. Uses xKdEnumerateDebuggingDevices pointer hooking for kernel-usermode...
Driver-kaldereta
Kaldereta Unsigned Kernel Mode Driver that does memory modifications Features get process id get base address of an image change protection of a memory region allocate memory region free memory read/write from address read/write from address with offset read from memory to buffer write to memory...
CVE-2026-38766
CVE-2026-38766 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via a kernel mode driver...
EATGuard
EATGuard Implementation of an export address table protection mitigation, like Export Address Filtering EAF How It Works This project is composed of three binaries that, when compiled, can be found in EATGuard\bin. They are: 1. EATGuardApplication.exe - "Malicious" application that loads...
LocalStranger
LocalStranger LocalStranger is a Proof of Concept project designed to demonstrate how dangerous a vulnerable kernel-mode driver actually is. WinNotify.sys as I call it, msft.sys, is a very dangerous vulnerable driver exposing arbitrary kernel primitives due to a complete lack of caller validation...
lithium-kernel
██╗ ██╗████████╗██╗ ██╗██╗██╗ ██╗███╗ ███╗ ██║ ██║╚══██╔══╝██║ ██║██║██║ ██║████╗ ████║ ██║ ██║ ██║ ███████║██║██║ ██║██╔████╔██║ ██║ ██║ ██║ ██╔══██║██║██║ ██║██║╚██╔╝██║ ███████╗██║ ██║ ██║ ██║██║╚██████╔╝██║ ╚═╝ ██║ ╚══════╝╚═╝ ╚═╝ ╚═╝ ╚═╝╚═╝ ╚═════╝ ╚═╝ ╚═╝ Windows kernel-mode driver framewor...
CVE-2026-74912
On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range. Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and...
CVE-2026-74912
The Imagination Technologies Graphics DDK (specifically versions 1.18 RTM2, 23.2 RTM2, 24.2 RTM2, 25.3 RTM, 25.1 RTM2, and 26.1 RTM2 ) is vulnerable to a buffer error caused by integer truncation . This issue occurs during the mapping of GPU buffer pages, restricting the mapping range to 0GB - 4G...
CVE-2026-74912 GPU DDK - Fix for CVE-2026-49746 prevents the mapping of graphics buffers > 4GB
On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range. Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and...
EUVD-2026-113489
On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range. Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and...
CVE-2026-74912: Imagination Technologies Graphics DDK: On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is…
On GPU systems with the security vulnerability fix for CVE-2026-49746 applied, the mapping range of graphics buffers is limited which causes errors when the mapping outside of that range. Integer truncation caused when mapping GPU buffer pages in the buffer’s range 0GB - 4GB, produces error and...
PT-2026-133269
Name of the Vulnerable Software and Affected Versions Imagination Technologies Graphics DDK affected versions not specified Description An integer truncation occurs when mapping GPU buffer pages within the 0GB - 4GB range. This issue limits the functionality of the kernel mode driver and causes...
Microsoft Windows Kernel-Mode Driver 10.0.22631 Privilege Escalation
Microsoft Windows Kernel-Mode Driver version 10.0.22631 contains an untrusted pointer dereference vulnerability that allows local privilege escalation. A proof of concept is available. https://packetstorm.news/download/236495...
CVE-2026-83573
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack...
EUVD-2026-99920
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-83573
An integer overflow or wraparound vulnerability exists in a Windows Kernel Mode Driver . This flaw allows an unauthorized attacker to elevate privileges by performing a physical attack . The vulnerability is characterized by a MEDIUM base severity score (6.8) and involves a PHYSICAL attack vector...
