CVE-2018-1932X

CVE-2018-1932X（Rust Exploit POC）GIGABYTE APP Center v1.05.21 以前向け ターゲットがメモリ安全でないからといって、エクスプロイトもそうでなければならないわけではありません！ 使用された脆弱性 : CVE-2018-19320 - ring0 memcpy 類似機能 CVE-2018-19323 - マシン固有レジスタ（MSR）の読み書き。 テスト環境: 20H1: Windows 10 Kernel Version 19041 MP 1 procs Free x64 参考 Vergilius Project: カーネル構造体...

CVE-2018-19320

CVE-2018-19320 Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement DSE as documented here: http://deniable.org/windows/windows-callbacks References https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320...

GIGABYTE XTREME GAMING ENGINE < 1.26 Multiple Vulnerabilities

The version of GIGABYTE XTREME GAMING ENGINE installed on the remote host is prior to 1.26. It is, therefore, affected by multiple vulnerabilities as referenced in GIGABYTE security advisory 1801: - The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE befor...

Information disclosure

The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 exposes ring0 memcpy-like functionality that could allow a local attacker to take complete control of the affected system...