Design/Logic Flaw

An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code. This is...

PT-2021-6313 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a driver vulnerability in the Storage Spaces Controller component of Windows operating systems, which involves the disclosure of information in an error data area...

PT-2021-6162 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Common Log File System Driver. It may allow an attacker to gain unauthorized access to protected information b...

Microsoft Windows Common Log File System Driver 权限许可和访问控制问题漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

The vulnerability of the MODAPI.sys driver software, used for optimizing performance in the MSI Dragon Center, allows a hacker to increase their privileges.

The vulnerability of the MODAPI.sys driver software used for optimizing the performance of MSI Dragon Center relates to the ability to access kernel memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

AMD Graphics Driver 缓冲区错误漏洞

AMD Graphics Driver is an integrated graphics driver from AMD. AMD Graphics Driver suffers from a buffer error vulnerability that stems from a potential security vulnerability in certain Intel Core processors with Radeon RX The Vega M GL integrated graphics card could allow privileged escalation,...

kernel: Improper input validation in the Intel(R) Ethernet ixgbe driver may allow an authenticated user to potentially enable DoS via local access

A flaw was found in the Linux kernel. This flaw allows an attacker who can modify the MTU of a virtualized PCIe device in a guest, for example to crash the host system’s kernel if they set the MTU of the VF device to an unsupported value...

PT-2021-8203 · Amd +1 · Amd Μprof +1

Name of the Vulnerable Software and Affected Versions: AMD μProf tool affected versions not specified Description: The AMDPowerProfiler.sys driver of the AMD μProf tool may allow lower privileged users to access MSRs in the kernel, which may lead to privilege escalation and ring-0 code execution ...

Mediatek display 安全漏洞

Mediatek display is a display function support component used in chips from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek display driver that originates from memory corruption due to uninitialized data in the display driver. An attacker could use this vulnerability to...

The driver’s vulnerability allows for the functionality of Storage Spaces controllers on Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the driver for enabling Storage Spaces Controller on Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the driver for providing functionality for Storage Spaces on Windows operating systems, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the driver for enabling Storage Spaces on Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the DirectX Graphics Kernel Driver (DXGKRNL) on Windows operating systems, related to privilege management errors, allows attackers to escalate their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Microsoft Windows Common Log File System Driver 权限许可和访问控制问题漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. The...

Samsung SMR 代码问题漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung cell phone applications. A security vulnerability exists in the mfc driver in versions prior to Samsung SMR Oct-2021 Release 1, which can lead to memory corruption...

The vulnerability in the `drivers/net/ethernet/xilinx/xilinx_emaclite.c` component of the Linux operating system allows a hacker to bypass the ASLR protection mechanism.

The vulnerability in the drivers/net/ethernet/xilinx/xilinxemaclite.c component of the Linux kernel is related to the use of uninitialized memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

CVE-2021-41285

CVE-2021-41285 affects Ballistix MOD Utility (versions up to and including 2.0.2.5). The MODAPI.sys driver exposes a vulnerability that can be triggered by a specific IOCTL, allowing low-privilege users to access physical memory via MmMapIoSpace and escalate to NT AUTHORITY\SYSTEM. Exploitation c...

CVE-2021-38304

Improper input validation in the National Instruments NI-PAL driver in versions 20.0.0 and prior may allow a privileged user to potentially enable escalation of privilege via local access...

Privilege escalation

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

CVE-2021-25462

NULL pointer dereference vulnerability in NPU driver prior to SMR Sep-2021 Release 1 allows attackers to cause memory corruption...

Vulnerability of services for the NFS ONCRPC XDR driver on Microsoft Windows operating systems, allowing a hacker to execute arbitrary code.

The vulnerability of services for the NFS ONCRPC XDR driver on Microsoft Windows is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted request...