Binalyze IREC.sys Security Vulnerability

Binalyze IREC.sys is an incident response forensic evidence collector from Binalyze. A security vulnerability exists in Binalyze IREC.sys v.3.11.0 and earlier versions, which originated from a vulnerability that allows a local attacker to execute arbitrary code and escalate privileges via the...

CVE-2023-41444: Improper Control of Generation of Code

An issue in Binalyze IREC.sys v.3.11.0 and before allows a local attacker to execute arbitrary code and escalate privileges via the fun1400084d0 function in IREC.sys driver...