CVE-2026-29923

CVE-2026-29923 - Local Privilege Escalation via Arbitrary Physical Memory Mapping The pstrip64.sys kernel driver exposes an IOCTL that allows low-privileged users to map arbitrary ranges of physical memory into their own virtual address space. This primitive allows full read/write access to the...

CVE-2014-0816

CVE-2014-0816 This is an exploit for CVE-2014-0816 JVNDB-2014-000026: Norman Security Suite vulnerable to privilege escalation. This exploit launches CMD.exe with SYSTEM privilege from Non-Administrator privilege by exploiting the vulnerability in an IOCTL handler of ngs.sys / ngs64.sys. Usage...

CVE-2026-36980-Kernel-BSOD-DoS-PoC

CVE-2026-36980-Kernel-BSOD-DoS-PoC Project Date : Feb 2026 / Discovered a buffer overflow vulnerability in the IOCTL handler of the pwdrvio.sys kernel driver. The vulnerability allows an unprivileged local attacker to corrupt kernel pool memory, triggering an immediate system crash BSOD and Denia...

Lenovo-CVE-2025-8061

CVE-2025-8061 is a privilege escalation vulnerability in Lenovo's LnvMSRIO.sys driver. The driver exposes IOCTL handlers that allow any user-mode process including unprivileged users to: Read/write arbitrary Model-Specific Registers MSRs Read/write arbitrary physical memory This gives a standard...

CVE-2026-129261

A vulnerability exists in Kingston FURY CTRL RGB Control Software up to version 2.0.66.0 . The flaw is located in an unknown function within the NTIOLib_X64.sys library, specifically affecting the IOCTL Handler component. Due to insufficient access control , an attacker with local access can perf...

EUVD-2026-125942

A vulnerability was found in Kingston FURY CTRL RGB Control Software up to 2.0.66.0. The impacted element is an unknown function in the library NTIOLibX64.sys of the component IOCTL Handler. Performing a manipulation results in exposed ioctl with insufficient access control. The attack is only...

cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE Proof-of-concept for CVE-2025-7771. ThrottleStop.sys exposes two IOCTL handlers that allow arbitrary physical memory read/write with no access control — any admin process can read or write anywhere in physical RAM. Tested on Windows 10 22H2 and Windows 11 23H2...

PT-2026-147430

Name of the Vulnerable Software and Affected Versions Kingston FURY CTRL RGB Control Software versions prior to 2.0.66.0 Description An issue exists in the IOCTL Handler component within the NTIOLib X64.sys library. An exposed IOCTL Input/Output Control interface has insufficient access control,...

CVE-2025-61155

CVE-2025-61155: Arbitrary Process Termination in GameDriverX64.sys https://github.com/user-attachments/assets/baf76601-94de-49a6-b4fd-e72f63112fab Overview This repository contains the security advisory and PoC for CVE-2025-61155. The GameDriverX64.sys anti-cheat driver allows any local user to...

Terminator_Killer

Terminator - Red Team Process Killer A collection of kernel-mode process termination tools leveraging vulnerable drivers BYOVD to kill protected processes from user mode. Project Structure File| Description ---|--- terminator.hpp| Shared class interface for process enumeration and termination...

CVE-2026-126785

A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about...

CVE-2026-126785 rmalright TR-VISION HOME IOCTL WFanManager.sys sub_11504 default permission

A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about...

EUVD-2026-124151

A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about...

CVE-2026-126785

A vulnerability exists in rmalright TR-VISION HOME 2.0.5 within the IOCTL Handler component. Specifically, the sub_11504 function in the WFanManager.sys library is susceptible to manipulation, which leads to incorrect default permissions . This vulnerability requires local access to exploit. No s...

PT-2026-145638

Name of the Vulnerable Software and Affected Versions rmalright TR-VISION HOME version 2.0.5 Description A local attacker with low privileges can achieve local privilege escalation to gain high-impact control of the system. The issue exists within the IOCTL Handler component in the WFanManager.sy...

CVE-2026-126785: rmalright TR-VISION HOME: A vulnerability has been found in rmalright TR-VISION HOME 2.0.5

A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about...

CVE-2026-69025

In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service...

CVE-2026-68985

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service...

CVE-2026-68985

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service...

CVE-2026-68985

The Samsung Exynos NPU driver contains a buffer error vulnerability due to improper validation of user input within the ioctl handler . This flaw can lead to an out-of-bounds write , potentially resulting in a denial of service (DoS) . The vulnerability has been specifically identified in the SAM...