PT-2021-23716

Name of the Vulnerable Software and Affected Versions Amzetta zPortal Windows zClient versions = 3.2.8180.148 Description The issue allows local attackers to execute arbitrary code in kernel mode or cause a denial of service, resulting in memory corruption and OS crash, via specially crafted I/O...

Amazon WorkSpaces 安全漏洞

Amazon WorkSpaces is a fully managed persistent desktop virtualization service from Amazon that lets your users access the data, applications, and resources they need from any supported device, anywhere, anytime. Amazon WorkSpaces is vulnerable to a buffer overflow vulnerability that could be...

PT-2021-23702

Name of the Vulnerable Software and Affected Versions NoMachine Server versions 4.0.346 through 7.7.4 Description The issue allows local attackers to execute arbitrary code in kernel mode or cause a denial of service, such as memory corruption and OS crash, via specially crafted I/O Request Packe...

CVE-2021-42994: Buffer Copy without Checking Size of Input

Donglify is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

CVE-2021-43006: Integer Overflow or Wraparound

AmZetta Amzetta zPortal DVM Tools is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools = v3.3.148.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request...

CVE-2021-42687: Buffer Copy without Checking Size of Input

A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

NVIDIA Windows GPU Display Driver (October 2021)

A display driver installed on the remote Windows host is affected by multiple vulnerabilities: - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for private IOCTLs, where an attacker with local unprivileged system access may cause a NUL...

AMD μProf 安全漏洞

AMD μProf is a performance analysis tool from AMD for applications running on Windows, Linux and FreeBSD operating systems. A security vulnerability exists in AMD μProf, which stems from the fact that the AMDPowerProfiler.sys driver may allow a low-privileged user to access the MSR in the kernel,...

CVE-2020-12964

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...

CVE-2020-12964

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...

CVE-2020-12964

CVE-2020-12964 affects the AMD Radeon Kernel Driver Escape 0x2000c00 Call handler. A local attacker could escalate privileges, trigger a DoS via Windows BugCheck, or leak information. AMD’s bulletin AMD-SB-1000 associates mitigations with specific driver versions: AMD Radeon Software for Windows ...

CVE-2020-12964: Undefined Security Weakness

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...

PT-2021-9517

Name of the Vulnerable Software and Affected Versions AMD Radeon Kernel Mode driver affected versions not specified Description A potential issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler, which could allow an attacker with low privilege to induce a Windows BugChec...

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode...

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains a privilege escalation vulnerability due to the component failing to properly handle objects in memory. Successful exploitation allows an attacker to run code in kernel mode...

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k kernel-mode driver fails to properly handle objects in memory which allows for privilege escalation. Successful exploitation allows an attacker to run code in kernel mode...

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode...

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k fails to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode...

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains a privilege escalation vulnerability when the Win32k component fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode...

Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability

Microsoft Windows Error Reporting WER contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode...