PT-2024-1572 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel-Mode Driver, which is caused by insufficient access restrictions. This vulnerability...

Experts Unveil Exploit for Recent Windows Vulnerability Under Active Exploitation

Details have emerged about a now-patched actively exploited security flaw in Microsoft Windows that could be abused by a threat actor to gain elevated privileges on affected systems. The vulnerability, tracked as CVE-2023-29336, is rated 7.8 for severity and concerns an elevation of privilege bug...

CVE-2022-41784

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-42465

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-41784

Improper access control in kernel mode driver for the IntelR OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® OFU Software Advisory

Summary: Potential security vulnerabilities in the Intel® One Boot Flash Update OFU software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41784 Description: Improper access control in...

UBUNTU-CVE-2023-0195

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hypothetical Information leak of unimportant data such as local variable data of the driver...

K21882212: Intel software vulnerabilities CVE-2020-8750 CVE-2020-12355

Security Advisory Description CVE-2020-8750 Use after free in Kernel Mode Driver for IntelR TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2020-12355 Authentication bypass by capture-replay in RPMB protocol...

CVE-2022-25949

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow...

CVE-2022-25949

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow...

CVE-2022-25949

CVE-2022-25949 affects KINGSOFT Internet Security 9 Plus (kernel-mode driver kwatch3, version 2010.06.23.247). The issue is a stack-based buffer overflow triggered by crafted inputs in the driver, potentially enabling local code execution with kernel privileges and impacting system integrity/avai...

Microsoft Win32k Memory Corruption Vulnerability

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application...

Microsoft Win32k Privilege Escalation Vulnerability

An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges...

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory...

Intel® 82599 Ethernet Controllers Advisory

Summary: Potential security vulnerabilities in the Intel® 82599 Ethernet Series Controllers and Adapters may allow denial of service. Intel is releasing software updates and prescriptive guidance to address these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-33096 Description:...

Improve kernel security with the new Microsoft Vulnerable and Malicious Driver Reporting Center

Windows 10 and Windows 11 have continued to raise the security bar for drivers running in the kernel. Kernel-mode driver publishers must pass the Hardware Lab Kit HLK compatibility tests, malware scanning, and prove their identity through extended validation EV certificates. This has significantl...

CVE-2020-12964

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...

CVE-2020-12964

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...