332 matches found
CVE-2021-31728
CVE-2021-31728 affects MalwareFox AntiMalware 2.74.0.150, with vulnerable drivers zam64.sys and zam32.sys. A non-privileged process can obtain a handle to \.\ZemanaAntiMalware, register via IOCTL 0x80002010, allocate executable memory via IOCTL 0x80002040, install a hook with IOCTL 0x80002044, an...
CVE-2021-31727
MalwareFox AntiMalware 2.74.0.150 is affected by CVEs CVE-2021-31727 and CVE-2021-31728. The vulnerability stems from incorrect access control in zam64.sys and zam32.sys, enabling a non-privileged process to obtain a handle to \.\ZemanaAntiMalware and issue IOCTLs (notably 0x80002010, 0x80002014,...
Persistence – AMSI
AMSI Antimalware Scan Interface is a vendor agnostic interface which can communicate with the endpoint in order to prevent execution of malware. The scan performed… Continue reading - Persistence - AMSI...
MalwareFox Anti-Malware 安全漏洞
MalwareFox Anti-Malware is an application from the American company MalwareFox. A malicious code detection software. A security vulnerability exists in MalwareFox AntiMalware 2.74.0.150, which allows the execution of ring 0 code to be exposed in the context of a driver, allowing an unprivileged...
PT-2021-7812 · Malwarefox · Malwarefox Antimalware
Name of the Vulnerable Software and Affected Versions: MalwareFox AntiMalware versions 2.74.0.150 Description: The issue is related to insufficient access control in the zam64.sys and zam32.sys drivers of MalwareFox AntiMalware, allowing a non-privileged process to elevate its privileges. This ca...
Exploit for CVE-2021-31728
CVE-2021-31727 and CVE-2021-31728 Public Reference f...
The vulnerability in the driver for the Early Launch Antimalware (ELAM) security technology of Microsoft Windows allows a malicious actor to bypass security functions.
The vulnerability of the driver for the Early Launch Antimalware ELAM security technology for Microsoft Windows is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass security functions...
The vulnerability in the driver for the Early Launch Antimalware (ELAM) security technology of Microsoft Windows allows a malicious actor to bypass security functions.
The vulnerability of the driver for the Early Launch Antimalware ELAM security technology for Microsoft Windows relates to the disclosure of information. Exploiting this vulnerability could allow a hacker to bypass security functions...
CVE-2021-28447
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...
CVE-2021-28447
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...
CVE-2021-27094
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...
CVE-2021-27094
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...
CVE-2021-28447
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...
Security feature bypass
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...
Security feature bypass
Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability...
CVE-2021-28447
CVE-2021-28447 is described in the provided documents as a Windows vulnerability affecting the Early Launch Antimalware Driver, characterized as a security feature bypass. The NVD entry lists a CVSS-3.1 base score of 4.4 (local, low attack complexity, high privileges required, no user interaction...
CVE-2021-28447 Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
...
CVE-2021-28447 Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability
...
CVE-2021-27094
Technical details for CVE-2021-27094 are not publicly provided in the supplied documents; the entry only states a Windows Early Launch Antimalware Driver security feature bypass. Monitor for updates; no affected products, impacts, or fixes are specified here.