CVE-2019-7630

An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation o...

Privilege escalation

An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation o...

Privilege escalation

An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

Privilege escalation

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

CVE-2019-7630

An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation o...

Design/Logic Flaw

Uncaught exception in system driver for IntelR Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentially enable a denial of service via local access...

The vulnerability of the SynTP.sys driver for Synaptics Touchpads allows a hacker to gain unauthorized access to protected information.

The vulnerability of the SynTP.sys driver for Synaptics Touchpads is related to errors in handling API requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2019-19452

A buffer overflow was found in Patriot Viper RGB through 1.1 when processing IoControlCode 0x80102040. Local attackers including low integrity processes can exploit this to gain NT AUTHORITY\SYSTEM privileges. Recent assessments: FULLSHADE at April 21, 2020 3:30pm UTC reported: Overview A...

CVE-2020-0658

An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'...

The vulnerability of the Database Gateway for ODBC component in the Oracle Database Server database management system allows a hacker to gain access to modify, add, or delete data, or to cause partial service interruption.

The vulnerability of the Oracle Database Server ODBC driver’s database server lies in its lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to remotely modify, add, or delete data, or cause a partial service failure using the OracleNet network protocol...

CVE-2020-8808

The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow local non-privileged users including low-integrity level processes to read and write to arbitrary physical memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, via a function call...

The vulnerability in the driver drivers/net/can/usb/peak_usb/pcan_usb_fd.c of the Linux operating system allows a hacker to disclose protected information.

The vulnerability in the driver drivers/net/can/usb/peakusb/pcanusbfd.c of the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability in the driver drivers/input/ff-memless.c of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/input/ff-memless.c file of the Linux operating system relates to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver drivers/net/can/usb/peak_usb/pcan_usb_pro.c of the Linux operating system allows a hacker to disclose protected information.

The vulnerability in the driver drivers/net/can/usb/peakusb/pcanusbpro.c of the Linux operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability in the driver/drivers/media/usb/ttusb-dec/ttusb_dec.c file of the Linux operating system allows a hacker to disclose protected information.

The vulnerability in the driver/drivers/media/usb/ttusb-dec/ttusbdec.c file of the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by...

The vulnerability of the wlc_wpa_sup_eapol driver from Broadcom Wi-Fi devices allows attackers to execute arbitrary code or cause service failures.

The vulnerability of the wlcwpasupeapol driver for Broadcom Wi-Fi devices is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure by sending specially crafted Wi-Fi packets containing data exceeding 32 bytes...

CVE-2020-0639

An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0615...

The vulnerability in the driver drivers/net/wireless/ath/ath9k/htc_hst.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/wireless/ath/ath9k/htchst.c kernel of the Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Intel Smart Sound Technology driver, related to the execution of operations beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Intel Smart Sound Technology driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with elevated privileges...

The vulnerability of the Intel Smart Sound Technology driver, related to the execution of operations beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Intel Smart Sound Technology driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with elevated privileges...