PT-2023-5139 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to a buffer out-of-bounds operation in memory when handling BLF log files, which can allow an attacker to elevate their privileges. This i...

Exploit for Out-of-bounds Write in Msi Afterburner

CVE-2019-16098 This CVE exploits the RTCore64.sys driver and...

The vulnerability of the Windows Common Log File System (CLFS) driver in the Windows operating system allows a hacker to gain elevated privileges.

The vulnerability of the Windows Common Log File System CLFS driver in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Hidden - Windows Driver With Usermode Interface Which Can Hide Processes, File-System And Registry Objects, Protect Processes And Etc

Hidden has been developed like a solution for reverse engineering and researching tasks. This is a windows driver with a usermode interface which is used for hiding specific environment on your windows machine, like installed RCE programs ex. procmon, wireshark, vm infrastructure ex. vmware tools...

Old certificate, new signature: Open-source tools forge signature timestamps on Windows drivers

Cisco Talos has observed threat actors taking advantage of a Windows policy loophole that allows the signing and loading of cross-signed kernel mode drivers with signature timestamp prior to July 29, 2015. Actors are leveraging multiple open-source tools that alter the signing date of kernel mode...

NVIDIA GPU Display Driver for Windows和Linux 安全漏洞

NVIDIA GPU Display Driver for Linux and NVIDIA GPU Display Driver for Windows are both products of NVIDIA Corporation, U.S.A. NVIDIA GPU Display Driver for Linux is a driver software for interactive support of the graphics card display module in Linux systems. NVIDIA GPU Display Driver for Linux ...

CVE-2022-21239

Out-of-bounds read in software for the Intel QAT Driver for Windows before version 1.9.0-0008 may allow an authenticated user to potentially enable information disclosure via local access...

PT-2023-12667 · Intel · Intel Qat Drivers

Name of the Vulnerable Software and Affected Versions: Intel QAT Driver for Windows versions prior to 1.9.0-0008 Description: The issue is an out-of-bounds read that may allow an authenticated user to potentially enable information disclosure via local access. Recommendations: For versions prior ...

PT-2023-12671 · Intel · Intel Qat Drivers

Name of the Vulnerable Software and Affected Versions: Intel QAT Driver for Windows versions prior to 1.9.0-0008 Description: The issue is related to an out-of-bounds write in the software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28251

Windows Driver Revocation List Security Feature Bypass Vulnerability...

CVE-2023-28251: Undefined Security Weakness

Windows Driver Revocation List Security Feature Bypass Vulnerability...

Chinese Hacker Group Earth Longzhi Resurfaces with Advanced Malware Tactics

A Chinese state-sponsored hacking outfit has resurfaced with a new campaign targeting government, healthcare, technology, and manufacturing entities based in Taiwan, Thailand, the Philippines, and Fiji after more than six months of no activity. Trend Micro attributed the intrusion set to a cyber...

PT-2023-6808 · Nvidia · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA Display Driver for Windows affected versions not specified Description: The issue is related to a driver vulnerability in NVIDIA Virtual GPU, which is caused by pointer dereference errors. An attacker may exploit this to cause a denial...

PT-2023-7241 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue is related to an uncontrolled search path element in the NVIDIA GPU Display Driver for Windows during its update process. This can allow an attacker ...

NVIDIA GPU Display Driver 缓冲区错误漏洞

The NVIDIA GPU Display Driver is a driver from NVIDIA Corporation that is used to interactively support the graphics card display module in the operating system. A security vulnerability exists in the NVIDIA GPU Display Driver that originates from a security issue in the kernel mode layer handler...

PT-2023-6807 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue is related to a vulnerability in the wksServicePlugin.dll library of the NVIDIA GPU Display Driver for Windows. This vulnerability is caused by the...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-28252link is external Microsoft Windows Common Log File System CLFS Driver Privilege Escalation Vulnerability These types of vulnerabilities are frequent attack...

PT-2023-2390 · Microsoft · Postscript/Pcl6 Class Printer Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft PostScript and PCL6 Class Printer Driver affected versions not specified Description: The issue is related to insufficient input validation in the PostScript Printer Driver Pscript and PCL6 Class Printer drivers for Windows operatin...

PT-2023-2305 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to insufficient protection of internal data in the Windows Common Log File System CLFS driver, which can be exploited to gain unauthorized...

SUSE CVE-2023-0195

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hypothetical Information leak of unimportant data such as local variable data of the driver...