NZXT CAM 权限许可和访问控制问题漏洞

NZXT CAM is a performance monitoring software for gaming computers from NZXT. A vulnerability exists in the NZXT CAM WinRing0x64 Driver Privilege I/O Write IRPs feature, which can be exploited by a remote attacker to elevate privileges by submitting a special I/O request...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

Remote code execution

An issue was discovered in Devid Espenschied PC Analyser through 4.10. The PCADRVX64.SYS kernel driver exposes IOCTL functionality that allows low-privilege users to read and write to arbitrary Model Specific Registers MSRs. This could lead to arbitrary Ring-0 code execution and escalation of...

CVE-2018-16720

CVE-2018-16720 affects Jingyun Antivirus v2.4.2.39, where the driver file ZySandbox.sys fails to validate input values for IOCTL 0x1236001c, enabling a local user to trigger a denial of service (BSOD) and possibly other impacts. The issue is documented across multiple sources (NVD, Red Hat adviso...

CVE-2018-16721

CVE-2018-16721 affects Jingyun Antivirus v2.4.2.39, where the driver ZySandbox.sys fails to validate inputs for IOCTL 0x12360090, enabling a local attacker to cause a denial of service (BSOD) or other unspecified impact. The issue is related to CVE-2018-16306. The CVSS data indicates LOCAL attack...

Design/Logic Flaw

A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system...

CVE-2020-12927

A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system...

PT-2020-6639 · Nvidia +2 · Nvidia Gpu Display Driver +2

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description: The issue is related to a vulnerability in the kernel mode layer handlers for control calls with embedded parameters, where dereferencing an untruste...

CVE-2020-16885

An elevation of privilege vulnerability exists when the Windows Storage VSP Driver improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim...

CVE-2020-12928

A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT authority system...

Design/Logic Flaw

A vulnerability in a dynamically loaded AMD driver in AMD Ryzen Master V15 may allow any authenticated user to escalate privileges to NT authority system...

kernel: out-of-bounds read in set_fdc in drivers/block/floppy.c

An out-of-bounds OOB memory access flaw was found in the floppy driver module in the Linux kernel. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability i...

The vulnerability of the Intel Ethernet I218 adapter driver lies in the lack of protection for service data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Intel Ethernet I218 adapter driver is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Information Disclosure

linux is vulnerable to information disclosure. The vulnerability exists through a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbpro.c driver...

kernel: heap-based buffer overflow in lbs_ibss_join_existing function in drivers/net/wireless/marvell/libertas/cfg.c

A heap-based buffer overflow vulnerability was found in the Linux kernel's Marvell WiFi chip driver. A remote attacker could cause a denial of service system crash or, possibly execute arbitrary code, when the lbsibssjoinexisting function is called after a STA connects to an AP...

kernel: buffer overflow in mwifiex_cmd_append_vsie_tlv function in drivers/net/wireless/marvell/mwifiex/scan.c

A flaw was found in the way the mwifiexcmdappendvsietlv in Linux kernel's Marvell WiFi-Ex driver handled vendor specific information elements. A local user could use this flaw to escalate their privileges on the system...

CVE-2020-6101

An exploitable code execution vulnerability exists in the Shader functionality of AMD Radeon DirectX 11 Driver atidxx64.dll 26.20.15019.19000. An attacker can provide a specially crafted shader file to trigger this vulnerability, resulting in code execution. This vulnerability can be triggered fr...

CVE-2020-15603

An invalid memory read vulnerability in a Trend Micro Secuity 2020 v16.0.0.1302 and below consumer family of products' driver could allow an attacker to manipulate the specific driver to do a system call operation with an invalid address, resulting in a potential system crash...

The vulnerability of the mwifiex_set_uap_rates() function in the Linux operating system’s Wi-Fi Marvell driver allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the mwifiexsetuaprates function in the Linux operating system’s Wi-Fi Marvell driver is related to buffer overflow vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...