cve-2025-7771

CVE-2025-7771 — ThrottleStop.sys LPE Proof-of-concept for CVE-2025-7771. ThrottleStop.sys exposes two IOCTL handlers that allow arbitrary physical memory read/write with no access control — any admin process can read or write anywhere in physical RAM. Tested on Windows 10 22H2 and Windows 11 23H2...

CVE-2025-61155

CVE-2025-61155: Arbitrary Process Termination in GameDriverX64.sys https://github.com/user-attachments/assets/baf76601-94de-49a6-b4fd-e72f63112fab Overview This repository contains the security advisory and PoC for CVE-2025-61155. The GameDriverX64.sys anti-cheat driver allows any local user to...

CVE-2014-0816

CVE-2014-0816 This is an exploit for CVE-2014-0816 JVNDB-2014-000026: Norman Security Suite vulnerable to privilege escalation. This exploit launches CMD.exe with SYSTEM privilege from Non-Administrator privilege by exploiting the vulnerability in an IOCTL handler of ngs.sys / ngs64.sys. Usage...

Terminator_Killer

Terminator - Red Team Process Killer A collection of kernel-mode process termination tools leveraging vulnerable drivers BYOVD to kill protected processes from user mode. Project Structure File| Description ---|--- terminator.hpp| Shared class interface for process enumeration and termination...

CVE-2026-29923

CVE-2026-29923 - Local Privilege Escalation via Arbitrary Physical Memory Mapping The pstrip64.sys kernel driver exposes an IOCTL that allows low-privileged users to map arbitrary ranges of physical memory into their own virtual address space. This primitive allows full read/write access to the...

CVE-2026-36980-Kernel-BSOD-DoS-PoC

CVE-2026-36980-Kernel-BSOD-DoS-PoC Project Date : Feb 2026 / Discovered a buffer overflow vulnerability in the IOCTL handler of the pwdrvio.sys kernel driver. The vulnerability allows an unprivileged local attacker to corrupt kernel pool memory, triggering an immediate system crash BSOD and Denia...

CVE-2026-126785

A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about...

CVE-2026-126785 rmalright TR-VISION HOME IOCTL WFanManager.sys sub_11504 default permission

A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about...

EUVD-2026-124151

A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about...

CVE-2026-126785

A vulnerability exists in rmalright TR-VISION HOME 2.0.5 within the IOCTL Handler component. Specifically, the sub_11504 function in the WFanManager.sys library is susceptible to manipulation, which leads to incorrect default permissions . This vulnerability requires local access to exploit. No s...

PT-2026-145638

A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub 11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early abou...

CVE-2026-126785: rmalright TR-VISION HOME: A vulnerability has been found in rmalright TR-VISION HOME 2.0.5

A vulnerability has been found in rmalright TR-VISION HOME 2.0.5. Impacted is the function sub11504 in the library WFanManager.sys of the component IOCTL Handler. Such manipulation leads to incorrect default permissions. The attack must be carried out locally. The vendor was contacted early about...

Lenovo-CVE-2025-8061

CVE-2025-8061 is a privilege escalation vulnerability in Lenovo's LnvMSRIO.sys driver. The driver exposes IOCTL handlers that allow any user-mode process including unprivileged users to: Read/write arbitrary Model-Specific Registers MSRs Read/write arbitrary physical memory This gives a standard...

CVE-2026-69025

In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service...

CVE-2026-68985

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service...

CVE-2026-68985

The Samsung Exynos NPU driver contains a buffer error vulnerability due to improper validation of user input within the ioctl handler . This flaw can lead to an out-of-bounds write , potentially resulting in a denial of service (DoS) . The vulnerability has been specifically identified in the SAM...

EUVD-2026-117289

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service...

CVE-2026-68985

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service...

CVE-2026-68985

In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service...

CVE-2026-69025

In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service...