CVE-2026-36980-Kernel-BSOD-DoS-PoC

CVE-2026-36980-Kernel-BSOD-DoS-PoC Data del progetto: febbraio 2026 / Scoperta una vulnerabilità di buffer overflow nell'handler IOCTL del driver kernel pwdrvio.sys. La vulnerabilità consente a un attaccante locale senza privilegi di corrompere la memoria del pool del kernel, provocando un crash...

CVE-2026-29923

CVE-2026-29923 - Escalation dei privilegi locale tramite mappatura arbitraria della memoria fisica Il driver del kernel pstrip64.sys espone un IOCTL che consente agli utenti con privilegi limitati di mappare intervalli arbitrari di memoria fisica nel proprio spazio di indirizzi virtuali. Questa...

CVE-2014-0816

CVE-2014-0816 Este é um exploit para CVE-2014-0816 JVNDB-2014-000026: Norman Security Suite vulnerável a escalada de privilégios. Este exploit executa o CMD.exe com privilégio de SYSTEM a partir de um privilégio de Não-Administrador, explorando a vulnerabilidade em um manipulador de IOCTL do...

Lenovo-CVE-2025-8061

CVE-2025-8061 è una vulnerabilità di escalation dei privilegi nel driver LnvMSRIO.sys di Lenovo. Il driver espone gestori IOCTL che consentono a qualsiasi processo in modalità utente inclusi utenti non privilegiati di: Leggere/scrivere Registri Specifici del Modello MSR arbitrari Leggere/scrivere...

CVE-2025-61155

CVE-2025-61155: Terminazione arbitraria di processi in GameDriverX64.sys https://github.com/user-attachments/assets/baf76601-94de-49a6-b4fd-e72f63112fab Panoramica Questo repository contiene l'avviso di sicurezza e il PoC per CVE-2025-61155. Il driver anti-cheat GameDriverX64.sys consente a...

cve-2025-7771

CVE-2025-7771 — LPE di ThrottleStop.sys Proof-of-concept per CVE-2025-7771. ThrottleStop.sys espone due gestori IOCTL che consentono lettura/scrittura arbitraria della memoria fisica senza alcun controllo degli accessi — qualsiasi processo amministrativo può leggere o scrivere ovunque nella RAM...

VulnCheck KEV: CVE-2026-36425

An issue in OPSWAT AppRemover Driver ardrv.sys v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation...

Terminator_Killer

Terminator - Process-Killer für Red Teams Ein Tool zur Prozessbeendigung im Kernel-Modus, das einen verwundbaren Treiber CVE-2026-0828 ausnutzt, um geschützte Prozesse aus dem Benutzermodus zu beenden. Kompilierung Erfordert MinGW-w64 GCC unter Windows. Kompilieren mit: root@kitploit: g++ --%...

CVE-2026-72482

In the Linux kernel, the following vulnerability has been resolved: gpib: fix double decrement of descriptorbusy in commandioctl commit d1857f8296dc "gpib: fix use-after-free in IO ioctl handlers" introduced a descriptorbusy reference counter to pin struct gpibdescriptor across IO ioctl operation...

PT-2026-72670

In the Linux kernel, the following vulnerability has been resolved: gpib: fix double decrement of descriptor busy in command ioctl commit d1857f8296dc "gpib: fix use-after-free in IO ioctl handlers" introduced a descriptor busy reference counter to pin struct gpib descriptor across IO ioctl...

CVE-2026-19380 Mullvad wireguard.sys IOCTL AdapterState reference count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-53262

In the Linux kernel, the following vulnerability has been resolved: l2tp: pppol2tp: hold reference to session in pppol2tpioctl pppol2tpioctl read sock-sk-skuserdata directly without any locks or reference counting. If a controllable sleep was induced during copyfromuser e.g. via a userfaultfd pag...

CVE-2026-12193

A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affected element is the function IOCtlHandler in the library RevoDetector.sys of the component IOCTL Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is...

CVE-2026-12193 VS Revo RevoUninstaller IOCTL RevoDetector.sys IOCtl_Handler heap-based overflow

A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affected element is the function IOCtlHandler in the library RevoDetector.sys of the component IOCTL Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is...

CVE-2026-12193 VS Revo RevoUninstaller IOCTL RevoDetector.sys IOCtl_Handler heap-based overflow

A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affected element is the function IOCtlHandler in the library RevoDetector.sys of the component IOCTL Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is...

CVE-2026-12193

VS Revo RevoUninstaller 2.5.x/2.6.x contains a heap-based overflow in IOCtl_Handler of RevoDetector.sys (IOCTL Handler). The vulnerability enables a local attack and is supported by publicly available exploit material. Upgrading to version 2.7.0 fixes the issue. If you rely on affected builds, ap...

CVE-2026-11459

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been...

PT-2026-47370

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified openSUSE Tumbleweed versions prior to kernel-devel-7.0.12-1.1 Description A race condition exists in the pseries/papr-hvpipe component. A deadlock can occur if an interrupt fires on the same CPU whi...

CVE-2026-3508

An Out-of-bounds Read vulnerability in the IOCTL handler in ASUS System Control Interface allows a local user to cause system crash BSOD via a read size that exceeds the buffer size.Refer to the ' Security Update for MyASUS ' section on the ASUS Security Advisory for more information...

CVE-2025-54517

CVE-2025-54517: Out of bounds write in the AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution. Affected component: AMD graphics driver/kernel ioctl path (AMDGV_CMD_GET_DIAG_DATA). Root cause: out-of-bounds write in the ioctl handler...