CVE-2024-34332

An issue in SiSoftware SANDRA v31.66 SANDRA.sys 15.18.1.1 and before allows an attacker to escalate privileges via a crafted buffer sent to the Kernel Driver using the DeviceIoControl Windows API...

CVE-2024-34332

CVE-2024-34332 describes a local privilege-escalation in SiSoftware SANDRA up to v31.66 (SANDRA.sys 15.18.1.1 or earlier) where a crafted buffer sent to the Windows kernel driver via DeviceIoControl can elevate privileges. The issue affects the kernel driver component and enables an attacker with...