179279 matches found
CVE-2025-12053
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12052
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12050
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12051
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12053
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12051
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12052
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12053 egwindrvx64.sys is potentially vulnerable to a buffer overflow
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12053
CVE-2025-12053 describes a buffer overflow in drivers within tool packages caused by using RTL_QUERY_REGISTRY_DIRECT to read a registry value. An untrusted user-mode application could trigger overflow, with local access required (CTL: LOW privileges) and no user interaction. Public references (NV...
CVE-2025-12052
CVE-2025-12052 is described across multiple sources as a local-buffer-overflow vulnerability stemming from drivers in tool packages reading registry values using RTL_QUERY_REGISTRY_DIRECT. Affected component is the driver (egwindrv.sys) or related kernel/tool drivers, with the untrusted applicati...
CVE-2025-12052 egwindrv.sys is potentially vulnerable to a buffer overflow.
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12052 egwindrv.sys is potentially vulnerable to a buffer overflow.
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12051 H2OFFT64.sys is potentially vulnerable to a buffer overflow.
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12051
The CVE-2025-12051 entry describes a buffer overflow vulnerability in drivers within InsydeH2O tool packages where RTL_QUERY_REGISTRY_DIRECT is used to read a registry value. An untrusted user-mode application may manipulate the registry value to trigger the overflow. Affected software is referen...
CVE-2025-12050
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12050 In H2OFFT32.sys is potentially vulnerable to a buffer overflow.
The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...
CVE-2025-12050
CVE-2025-12050 affects drivers in tool packages that read a registry value using RTL_QUERY_REGISTRY_DIRECT, potentially allowing a local untrusted user to cause a buffer overflow. Red Hat, NVD, NVD-derived listings and CNNVD cite the same description, with impact described as high confidentiality...
PT-2026-2440
Name of the Vulnerable Software and Affected Versions Windows Kernel Driver affected versions not specified Description The drivers within the tool packages utilize the RTL QUERY REGISTRY DIRECT flag when reading a registry value. This process is susceptible to a buffer overflow if an untrusted...
Insyde InsydeH2O 安全漏洞
Insyde InsydeH2O is a new EFI/UEFI specification from Insyde, China. It is intended to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O, which stems from a buffer overflow that can be caused by untrusted user-mode applications when readin...
Insyde InsydeH2O 安全漏洞
Insyde InsydeH2O is a new EFI/UEFI specification from Insyde, China. It is intended to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O, which stems from a buffer overflow that can be caused by untrusted user-mode applications when readin...