CVE-2025-69783

A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name e.g., csrss.exe, edrsvc.exe, edrcon.exe. This allows unauthorized interaction with the OpenEDR kernel driver, granting access to privileged functionality such as...

PT-2025-26282 · Openvpn · Openvpn

Name of the Vulnerable Software and Affected Versions: OpenVPN ovpn-dco-win versions 1.3.0 and earlier OpenVPN ovpn-dco-win versions 2.5.8 and earlier Description: A buffer overflow in OpenVPN's Windows driver allows a local user process to send a too large control message buffer to the kernel...