NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE 此利用程序重建并利用了CVE-2019-16098漏洞。该漏洞位于Micro-Star MSI Afterburner...

CVE-2019-16098

CVE-2019-16098 Micro-Star MSI Afterburner 4.6.2.15658 일명 RTCore64.sys 및 RTCore32.sys의 드라이버는 인증된 모든 사용자가 임의의 메모리, I/O 포트 및 MSR을 읽고 쓸 수 있도록 허용합니다. 이는 권한 상승, 높은 권한 하의 코드 실행 및 정보 공개에 악용될 수 있습니다. 이 서명된 드라이버는 또한 Microsoft 드라이버 서명 정책을 우회하여 악성 코드를 배포하는 데 사용될 수 있습니다. 더 많은 업데이트는 CVE-2019-16098를 방문하세요. 경고 :...

EUVD-2024-17195

Malicious code in bioql PyPI...

EUVD-2024-17210

Malicious code in bioql PyPI...

EUVD-2024-32318

Malicious code in bioql PyPI...

CVE-2024-3745 MSI Afterburner v4.6.6.16381 Beta 3 - ACL Bypass

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

CVE-2024-3745 MSI Afterburner v4.6.6.16381 Beta 3 - ACL Bypass

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

CVE-2024-3745

MSI Afterburner v4.6.6.16381 Beta 3 is affected by an ACL Bypass in the RTCore64.sys driver, enabling escalation from a low-privilege user and potentially triggering CVE-2024-1443 and CVE-2024-1460. The CVE entry is supported by multiple sources (NVD, CVE lists) with CVSSv3.1 metrics showing LOCA...

PT-2024-27563 · Msi · Msi Afterburner

Name of the Vulnerable Software and Affected Versions: MSI Afterburner version 4.6.6.16381 Beta 3 Description: The issue is related to an ACL Bypass vulnerability in the RTCore64.sys driver, which can lead to incorrect authorization and potentially compromise the local system. Recommendations:...

CVE-2024-3745: Incorrect Authorization

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

CVE-2024-1460

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1460

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1443

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1460 MSI Afterburner v4.6.5.16370 - Kernel Memory Leak

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1460 MSI Afterburner v4.6.5.16370 - Kernel Memory Leak

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1460

Summary: CVE-2024-1460 affects MSI Afterburner v4.6.5.16370 and is described as a kernel memory leak in RTCore64.sys triggered by IOCTL 0x80002040. The handle to RTCore64.sys must be obtained from a high-integrity process, constraining exploitability to local, high-privilege contexts. Technical d...

CVE-2024-1443 MSI Afterburner v4.6.5.16370 - Denial of Service

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1443 MSI Afterburner v4.6.5.16370 - Denial of Service

MSI Afterburner v4.6.5.16370 is vulnerable to a Denial of Service vulnerability by triggering the 0x80002000 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...

CVE-2024-1443

MSI Afterburner 4.6.5.16370 is vulnerable to a Denial of Service via the RTCore64.sys driver. The DoS can be triggered by calling IOCTL 0x80002000, and the driver handle can only be obtained from a high-integrity process. No exploitation details are provided in the supplied documents, and there i...

CVE-2024-1460: Exposure of Sensitive Information to an Unauthorized Actor

MSI Afterburner v4.6.5.16370 is vulnerable to a Kernel Memory Leak vulnerability by triggering the 0x80002040 IOCTL code of the RTCore64.sys driver. The handle to the driver can only be obtained from a high integrity process...