PT-2025-31967

Name of the Vulnerable Software and Affected Versions cpuz.sys version 1.0.5.4 Description An attacker can use DeviceIoControl with unvalidated parameters 0x9C402440 and 0x9C402444 as IoControlCodes to perform RDMSR and WRMSR, respectively. This allows modification of MSR LSTAR and hooking of...