CVE-2025-60349

CVE-2025-60349：Pxscan 任意进程终止 在 Prevx v3.0.5.220 中发现了一个问题，攻击者可通过向 pxscan.sys 驱动程序发送 IOCTL 代码 0x22E044 来造成拒绝服务。注册表项 HKEYLOCALMACHINE\System\CurrentControlSet\Services\pxscan\Files 下列出的任何进程都将被终止。 由 Dylan Reuter 于 2025 年 8 月发现。 参考： https://nvd.nist.gov/vuln/detail/CVE-2025-60349...

CVE-2026-36425

CVE-2026-36425 : OPSWAT AppRemover 任意プロセス終了 署名されたOPSWATカーネルドライバで、要求に応じて任意のプロセスを強制終了します。管理者権限不要、権限チェックなし、問答無用。EDR、アンチウイルス、PPLで保護されたプロセスを指定すると、即座に終了します。3種類の異なる強制終了方法があり、すべてカーネルモードで実行され、任意のローカルユーザーからの単一のIOCTLでトリガーされます。脆弱なドライバのバリアントが16個特定され、すべて有効な署名が付与されています。 ⚠️...

CVE-2025-66676

CVE-2025-66676 IOBit Unlocker 1.3.0.11 およびそれ以前のバージョンにおいて、アプリケーションはファイルのロック解除を試みることで任意のプロセスを終了させることができます。 背景 このアプリケーションは、ロックされたファイルを解除するために使用されます。実行中のプロセスのプロセスイメージファイルをロックされたファイルとして指定することで、IOBit Unlocker...

CVE-2026-15599

The CVE-2026-15599 entry concerns TÜBİTAK BİLGEM Software Technologies Research Institute’s pardus-domain-joiner (affected: before 0.5.5). The issue is described as an unverified ownership vulnerability that enables Privilege Abuse. CVSS 3.1 base score is 3.3 (LOW), with LOCAL attack vector, low ...

CVE-2026-15599 Arbitrary Process Termination in TÜBİTAK BİLGEM's pardus-domain-joiner

Unverified ownership vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-domain-joiner allows Privilege Abuse. This issue affects pardus-domain-joiner: before 0.5.5...

CVE-2026-35081 Arbitrary process termination vulnerability in method ugw-logstop

The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input...

CVE-2026-35081

CVE-2026-35081 documents an Arbitrary process termination vulnerability in the ugw-logstop method. A remote attacker with user privileges can terminate arbitrary processes due to insufficient input validation. The Connected documents provide the description and CVSS metrics (CVSSv4.0 base 7.2 HIG...

EUVD-2011-1782

Malware in sbrugna...

EUVD-2024-17578

Malicious code in bioql PyPI...

CVE-2025-37128 Authenticated Arbitrary Process Termination allows potential System Disruption in ECOS

A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...

CVE-2019-10724

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520TZ370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO510-22ISH 6.0.1.8642...

CVE-2024-51324

An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate arbitrary process via executing a BYOVD Bring Your Own Vulnerable Driver attack...

CVE-2024-51324

An issue in the BdApiUtil driver of Baidu Antivirus v5.2.3.116083 allows attackers to terminate arbitrary process via executing a BYOVD Bring Your Own Vulnerable Driver attack...

CVE-2024-51324

CVE-2024-51324 exists in Baidu Antivirus driver BdApiUtil64.sys (v5.2.3.116083). The vulnerability arises from an IOCTL handler (0x800024B4) that terminates a target process without privilege validation, enabling a BYOVD attack to kill arbitrary processes from user mode. Exploitation chain demons...

PT-2025-6398

Name of the Vulnerable Software and Affected Versions Baidu Antivirus version 5.2.3.116083 Description An issue in the BdApiUtil driver of Baidu Antivirus allows attackers to terminate arbitrary processes by executing a Bring Your Own Vulnerable Driver BYOVD attack. The DeadLock ransomware has be...

VulnCheck KEV: CVE-2024-1853

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-1853

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-1853 Zemana AntiLogger v2.74.204.664 - Arbitrary Process Termination

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-1853 Zemana AntiLogger v2.74.204.664 - Arbitrary Process Termination

Zemana AntiLogger v2.74.204.664 is vulnerable to an Arbitrary Process Termination vulnerability by triggering the 0x80002048 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-1853

CVE-2024-1853 affects Zemana AntiLogger v2.74.204.664. It exposes an Arbitrary Process Termination vulnerability by triggering IOCTL code 0x80002048 in the vulnerable drivers zam64.sys and zamguard64.sys , enabling an attacker to terminate processes. Public materials describe BYOVD-style driver a...