CVE-2025-63602

CVE-2025-63602 关于CVE-2025-63602的披露，包含一个用于Awesome Miner 11.2.4中不安全驱动程序的PoC，导致对MSRs的任意内核读/写，从而实现内核代码执行。...

CVE-2025-12742

A Looker user with a Developer role could cause Looker to execute a malicious command, due to insecure processing of Teradata driver parameters. Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted instances. No user action is required...

CVE-2025-63602

A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...

CVE-2025-63602

A vulnerability exists in Awesome Miner versions through 11.2.4 due to the implementation of an insecure version of the WinRing0 driver (version 1.2.0.5, renamed as IntelliBreeze.Maintenance.Service.sys ). The driver lacks a properly secured DACL , which allows unprivileged users to interact with...

EUVD-2022-48319

Malicious code in bioql PyPI...

CVE-2025-0289

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service...

CVE-2025-0289 CVE-2025-0289

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service...

CVE-2022-45451

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40173, Acronis Agent Windows before build 30600, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2024-4763

CVE-2024-4763 affects Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM). The entry describes an insecure driver vulnerability that could allow a local attacker to escalate privileges to the kernel. The CVSS v3.1 metrics indicate a LOCAL attack with LOW attack ...

CVE-2024-4763

An insecure driver vulnerability was reported in Lenovo Display Control Center LDCC and Lenovo Accessories and Display Manager LADM that could allow a local attacker to escalate privileges to kernel...

Lenovo Display Control Center和Lenovo Accessories and Display Manager 安全漏洞

Lenovo Display Control Center LDCC and Lenovo Accessories and Display Manager LADM are both products of Lenovo, China.Lenovo Display Control Center is a software platform for Lenovo displays. Lenovo Accessories and Display Manager LADM are products of Lenovo, China. Lenovo Display Control Center ...

PT-2024-32687

Name of the Vulnerable Software and Affected Versions Lenovo Display Control Center LDCC affected versions not specified Lenovo Accessories and Display Manager LADM affected versions not specified Description A local attacker could exploit an insecure driver vulnerability to escalate privileges t...

CVE-2023-41743

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40278, Acronis Cyber Protect Cloud Agent Windows before build 31637, Acronis Cyber Protect 15 Windows before build 35979,...

Privilege escalation

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40278, Acronis Agent Windows before build 31637, Acronis Cyber Protect 15 Windows before build 35979...

CVE-2022-45451

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40173, Acronis Agent Windows before build 30600, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2022-45451

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40173, Acronis Agent Windows before build 30600, Acronis Cyber Protect 15 Windows before build 30984...

Privilege escalation

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40173, Acronis Agent Windows before build 30600, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2023-41743

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40278, Acronis Cyber Protect Cloud Agent Windows before build 31637, Acronis Cyber Protect 15 Windows before build 35979,...

CVE-2022-45451

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40173, Acronis Agent Windows before build 30600, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2022-45451

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40173, Acronis Agent Windows before build 30600, Acronis Cyber Protect 15 Windows before build 30984...