The vulnerability of the Kernel Streaming WOW Thunk Service Driver (Drivers\ksthunk.sys) on Windows operating systems, which allows a hacker to escalate their privileges.

The vulnerability of the Kernel Streaming WOW Thunk Service Driver Drivers\ksthunk.sys on Windows operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2024-38057

Technical details about CVE-2024-38057 (affected product/version, root cause, exploitability, and fix) are not provided in the connected documents. Monitor for updates from vendor/security advisories.

CVE-2024-38052 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38052 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

CVE-2023-32278

Path transversal in some IntelR NUC Uniwill Service Driver for IntelR NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver installation software before version 1.0.1.7 for IntelR NUC Software Studio may allow an authenticated user to potentially enable escalation of privilege via loca...

Path traversal

Path transversal in some IntelR NUC Uniwill Service Driver for IntelR NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver installation software before version 1.0.1.7 for IntelR NUC Software Studio may allow an authenticated user to potentially enable escalation of privilege via loca...

CVE-2023-32278

Path transversal in some IntelR NUC Uniwill Service Driver for IntelR NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver installation software before version 1.0.1.7 for IntelR NUC Software Studio may allow an authenticated user to potentially enable escalation of privilege via loca...

CVE-2023-32278

CVE-2023-32278 affects Intel® NUC Uniwill Service Driver (Intel® NUC Software Studio) installation software, prior to version 1.0.1.7. The issue is a path traversal weakness in the installer that could allow an authenticated local user to escalate privileges. Affected product scope includes the N...

PT-2023-23697 · Intel · Intel Nuc Uniwill Service Driver

Name of the Vulnerable Software and Affected Versions: IntelR NUC Uniwill Service Driver version 1.0.1.6 and earlier Description: The issue allows an authenticated user to potentially enable escalation of privilege via local access due to path transversal in the IntelR NUC Uniwill Service Driver...

PT-2023-4987

Name of the Vulnerable Software and Affected Versions Microsoft Streaming Service Proxy affected versions not specified Description An elevation-of-privilege issue exists in the Microsoft Streaming Service Proxy for Windows operating systems. The flaw is caused by a memory buffer overflow, which...

The vulnerability of the Windows Bluetooth Service driver of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the Windows Bluetooth Service driver exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-28713

Rogue backends can cause DoS of guests via high frequency events This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "drive...

Input validation

In SUPERAntiSpyware Professional Trial 6.0.1254, the driver file SASKUTIL.SYS allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C40204c...

QDSP6v2 Voice Service driver for the Linux kernel denial-of-service vulnerability

Qualcomm Innovation Center QuIC Android contributions for MSM is a Qualcomm silicon product for the MSM program to support users in building Android-based platforms with other enhancements.QDSP6v2 Voice Service driver for the Linux kernel is an audio driver for the Linux kernel. The QDSP6v2 Voice...

CVE-2016-5343

drivers/soc/qcom/qdsp6v2/voicesvc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service memory corruption or possibly have unspecified other...

Buffer overflow

drivers/soc/qcom/qdsp6v2/voicesvc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service memory corruption or possibly have unspecified other...

CVE-2016-5343

drivers/soc/qcom/qdsp6v2/voicesvc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, allows attackers to cause a denial of service memory corruption or possibly have unspecified other...

AVG Anti-Virus本地特权提升漏洞

AVG Anti-Virus是一款反病毒应用程序。 AVG Anti-Virus不正确限制非特权用户写数据到内核内存，本地攻击者可以利用漏洞提升特权。 AVG Anti-Virus提供的服务驱动avg7core.sys存在问题，允许非特权用户写任意数据到任意地址。此驱动在它的通用DeviceIoControl处理器中支持两个IOCTLs，其中IOCTLs 0x5348E004用于获得核心驱动对用户模式组件上执行特权函数，由于设计错误，在没有进行任何检查就拷贝任意数据到用户模式应用程序提供的地址中。 AVG AVG Anti-Virus Free Edition 7.5.446 AVG A...