CVE-2017-11882-Blocker

CVE-2017-11882-Blocker Ein Windows-Treiber, der CVE-2017-11882 neutralisiert : Funktionsweise Dieses Projekt besteht aus einem Kernel-Treiber und einer Benutzermodus-Benachrichtigungskomponente, die über ein benutzerdefiniertes Gerät unter Verwendung des Inverted-Call-Modells kommunizieren...

HITCON-2023-Demo-CVE-2023-20562

HITCON 2023 Demo CVE-2023-20562 Descrizione Questa dimostrazione si è svolta a HITCON 2023 a Taiwan. La demo evidenzia lo sfruttamento di AMDCpuProfiler.sys all'interno di AMD μProf. Attivando una scrittura arbitraria sul token EPROCESS, si ottiene l'escalation dei privilegi a livello SYSTEM. La...

CVE-2026-62699 Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

...

CVE-2026-58602

CVE-2026-58602 is a Windows kernel-mode-driver vulnerability described as a use-after-free that enables an authorized, local attacker to achieve elevation of privilege. The public documents do not provide product/vendor specifics beyond “Windows kernel” and “kernel-mode driver,” nor details on af...

SignalRGB kernel driver contains improper access control and IOCTL vulnerabilities

Overview The SignalRGB kernel driver, SignalIo.sys, contains two vulnerabilities involving improper access control and unsafe memory handling. The device object is created with an overly permissive Discretionary Access Control List DACL that allows user-mode processes to access privileged hardwar...

CVE-2026-8501

Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit...

CVE-2026-8501

Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit...

CVE-2026-8501

CVE-2026-8501 affects the PC Tools PCTCore64.sys Windows kernel driver. The driver exposes the .�5CPCTCoreDriver WDM device interface with no access control, allowing user-mode processes to invoke privileged IOCTL handlers and perform low-level operations. Documented impacts include credential th...

CVE-2026-8501

Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit...

EUVD-2026-33669

Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device interface and invoke privileged IOCTL handlers. A local attacker with the ability to access or load the affected driver can exploit...

PCTCore64.sys Windows kernel driver contains missing access control vulnerability

Overview The PCTCore64.sys Windows kernel driver from PC Tools Internet Security exposes its \.\PCTCoreDriver device interface with no access control, allowing any user-mode process to interact with the driver and invoke privileged IOCTL I/O Control commands. In a Bring Your Own Vulnerable Driver...

CVE-2025-11156

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

CVE-2025-11156

Netskope was notified about a potential gap in its agent NS Client on Windows systems. If this gap is successfully exploited, a local, authenticated user with Administrator privileges can improperly load the driver as a generic kernel service. This triggers the flaw, causing a system crash...

EUVD-2018-1756

Malware in sbrugna...

EUVD-2015-2610

Malware in sbrugna...

VulnCheck KEV: CVE-2024-35250

Microsoft Windows Kernel-Mode Driver contains an untrusted pointer dereference vulnerability that allows a local attacker to escalate privileges...

CVE-2024-43554

Windows Kernel-Mode Driver Information Disclosure Vulnerability...

PT-2024-6922 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Kernel-Mode Driver. It is caused by improper cross-boundary removal of critical data, which...

The vulnerability of the kernel driver of Windows operating systems allows attackers to gain increased privileges.

The vulnerability of the kernel driver in Windows operating systems is related to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the win32kfull driver of the Windows GDI component allows attackers to gain increased privileges.

The vulnerability of the win32kfull driver of the Windows GDI component on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...