CVE-2021-28685

ASUS GPUTweak II before 2.3.0.3 is affected by CVE-2021-28685 via AsIO2_64.sys and AsIO2_32.sys. The driver routines allow low-privileged users to map physical memory into the process’s virtual address space and to interact with MSR registers, enabling exploitation to obtain NT AUTHORITY\SYSTEM p...