Intel® OFU Software Advisory

Summary: Potential security vulnerabilities in the Intel® One Boot Flash Update OFU software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41784 Description: Improper access control in...

UBUNTU-CVE-2023-0195

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hypothetical Information leak of unimportant data such as local variable data of the driver...

K21882212: Intel software vulnerabilities CVE-2020-8750 CVE-2020-12355

Security Advisory Description CVE-2020-8750 Use after free in Kernel Mode Driver for IntelR TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2020-12355 Authentication bypass by capture-replay in RPMB protocol...

CVE-2022-25949

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow...

CVE-2022-25949

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow...

CVE-2022-25949

CVE-2022-25949 affects KINGSOFT Internet Security 9 Plus (kernel-mode driver kwatch3, version 2010.06.23.247). The issue is a stack-based buffer overflow triggered by crafted inputs in the driver, potentially enabling local code execution with kernel privileges and impacting system integrity/avai...

CVE-2022-25949: Stack-based Buffer Overflow

The kernel mode driver kwatch3 of KINGSOFT Internet Security 9 Plus Version 2010.06.23.247 fails to properly handle crafted inputs, leading to stack-based buffer overflow...

Microsoft Win32k Memory Corruption Vulnerability

The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application...

Microsoft Win32k Privilege Escalation Vulnerability

An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges...

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft Win32k contains a privilege escalation vulnerability due to the Windows kernel-mode driver failing to properly handle objects in memory...

Intel® 82599 Ethernet Controllers Advisory

Summary: Potential security vulnerabilities in the Intel® 82599 Ethernet Series Controllers and Adapters may allow denial of service. Intel is releasing software updates and prescriptive guidance to address these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-33096 Description:...

PT-2022-2171

Name of the Vulnerable Software and Affected Versions KINGSOFT Internet Security 9 Plus version 2010.06.23.247 Description The issue is related to the kernel mode driver kwatch3, which fails to properly handle crafted inputs. This failure leads to a stack-based buffer overflow. The exploitation o...

Improve kernel security with the new Microsoft Vulnerable and Malicious Driver Reporting Center

Windows 10 and Windows 11 have continued to raise the security bar for drivers running in the kernel. Kernel-mode driver publishers must pass the Hardware Lab Kit HLK compatibility tests, malware scanning, and prove their identity through extended validation EV certificates. This has significantl...

CVE-2020-12964

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...

CVE-2020-12964

CVE-2020-12964 affects the AMD Radeon Kernel Driver Escape 0x2000c00 Call handler. A local attacker could escalate privileges, trigger a DoS via Windows BugCheck, or leak information. AMD’s bulletin AMD-SB-1000 associates mitigations with specific driver versions: AMD Radeon Software for Windows ...

CVE-2020-12964

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...

PT-2021-9517

Name of the Vulnerable Software and Affected Versions AMD Radeon Kernel Mode driver affected versions not specified Description A potential issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler, which could allow an attacker with low privilege to induce a Windows BugChec...

CVE-2020-12964: Undefined Security Weakness

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...

Microsoft Windows Redirected Drive Buffering 信息泄露漏洞

Microsoft Windows Redirected Drive Buffering is a Redirected Drive Buffering Subsystem RDBSS from Microsoft Corporation USA provided as the kernel-mode file system driver rdbss.sys, which is included in the operating system, and as the static library rdbsslib.lib provided as the kernel-mode file...

Microsoft Windows Redirected Drive Buffering 权限许可和访问控制问题漏洞

Microsoft Windows Redirected Drive Buffering is a Redirected Drive Buffering Subsystem RDBSS from Microsoft Corporation USA provided as the kernel-mode file system driver rdbss.sys, which is included in the operating system, and as the static library rdbsslib.lib provided as the kernel-mode file...