CVE-2026-0828

Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64 , versions 10.5.75.0 and 11.11.4.0, allows unprivileged user to abuse IOCTL path and terminate protected system processes...

CVE-2026-0828

The Safetica endpoint client (x64) kernel driver ProcessMonitorDriver.sys is vulnerable to a Bring Your Own Vulnerable Driver (BYOVD) attack. In versions 10.5.75.0 and 11.11.4.0 , an unprivileged user can abuse an unauthenticated IOCTL handler (0xB822200C) that lacks caller privilege validation a...

Exploit for CVE-2026-0828

CVE-2026-0828 — Safetica ProcessMonitorDriver.sys BYOVD PoC S...

Safetica contains a kernel driver vulnerability

Overview Kernel driver ProcessMonitorDriver.sys in Safetica's endpoint client x64, versions 10.5.75.0 and 11.11.4.0, allows for an unprivileged user to abuse an IOCTL path and terminate protected system processes. Description Safetica is a Data Loss Prevention DLP and Insider Risk Management IRM...