212 matches found
CVE-2022-41621
Improper access control in some IntelR QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2022-34849
Uncaught exception in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1436v2 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-27808
Insufficient control flow management in some IntelR Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-29838
Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally...
CVE-2025-29838
Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally...
CVE-2025-29838
Null pointer dereference in Windows Drivers allows an unauthorized attacker to elevate privileges locally...
CVE-2025-29838
CVE-2025-29838 describes a local-privilege-escalation vulnerability in the Windows ExecutionContext Driver caused by a null pointer dereference in Windows Drivers. Affected: Windows Client/Server builds with the ExecutionContext Driver. Impact per sources: unauthorized elevation of privileges. Th...
PT-2025-20953 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a null pointer dereference in Windows Drivers, allowing an unauthorized attacker to elevate privileges locally. This could potentially affect the system...
Virtuozzo Hybrid Server 7.5 Update 7 Hotfix 3 (7.5.7-176)
The Hotfix 3 for Virtuozzo Hybrid Server 7.5 Update 7 provides fixes for the c2v-convert tool and VirtIO SCSI controllers. Vulnerability id: PSBM-160763 Fixed an issue where the c2v-convert tool failed to convert a container if one of its disks did not have a mount point specified in the source...
CVE-2025-24066
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
Exploring vulnerable Windows drivers
This post is the result of research into the real-world application of the Bring Your Own Vulnerable Driver BYOVD technique along with Cisco Talos' series of posts about malicious Windows drivers. Some of this research was presented at the AVAR conference in Chennai at the beginning of December...
CVE-2024-32044
Improper access control for some IntelR ArcTM Pro Graphics for Windows drivers before version 31.0.101.5319 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...
PT-2024-24373 · Intel · Intel Arc Pro Graphics
Name of the Vulnerable Software and Affected Versions: IntelR ArcTM Pro Graphics for Windows versions prior to 31.0.101.5319 Description: The issue is related to improper access control in some IntelR ArcTM Pro Graphics for Windows drivers. This may allow an authenticated user to potentially enab...
VulnCheck KEV: CVE-2020-14979
The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low integrity processes, to read and write to arbitrary memory locations. This allows any user to gain NT AUTHORITY\SYSTEM privileges by mapping \Device\PhysicalMemory into the...
Ghidra data type archive for Windows driver functions
While reverse-engineering Windows drivers with Ghidra, it is common to encounter a function or data type that is not recognized during disassembly. This is because Ghidra does not natively include the majority of the definitions for data types and functions used by Windows drivers. Thankfully,...
Specific Defender files are missing from the published image
When you publish the image, C:\Windows\System32\drivers\mssecflt.sys and -C:\Windows\System32\drivers\mssecwfp.sys are missing from the published image...
CVE-2023-41252
Out-of-bounds read in some IntelR QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2023-27303
Improper access control in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access...