CVE-2016-7255

CVE-2016-7255 Os drivers em modo kernel no Microsoft Windows Vista SP2, Windows Server 2008 SP2 e R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold e R2, Windows RT 8.1, Windows 10 Gold, 1511 e 1607, e Windows Server 2016 permitem que usuários locais obtenham privilégios por meio de um...

FalconEye

FalconEye: Software di rilevamento in tempo reale per iniezioni di processi Windows FalconEye è un software di rilevamento endpoint Windows per iniezioni di processi in tempo reale. È un driver in modalità kernel che mira a intercettare le iniezioni di processi mentre avvengono in tempo reale...

aegis

Aegis Driver di protezione dei processi in modalità kernel che utilizza ObRegisterCallbacks per rimuovere i permessi di accesso alla memoria dagli handle. Implementazione di base che intercetta la creazione degli handle e rimuove PROCESSVMREAD/WRITE/OPERATION dai tentativi di accesso non...

CVE-2026-38766

CVE-2026-38766 Un problema in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 consente a un attaccante locale di elevare i privilegi tramite un driver in modalità kernel...

EATGuard

EATGuard Implementazione di una mitigazione per la protezione della Export Address Table, come l'Export Address Filtering EAF Come Funziona Questo progetto è composto da tre binari che, una volta compilati, si trovano in EATGuard\bin. Essi sono: 1. EATGuardApplication.exe - Applicazione...

access_updated

Singular Access Aktualisierter Fork vonbtbd/access mit Zydis-basiertem dynamischen Pattern-Finding für Windows 10/11-Kompatibilität Ein Syscall-Wrapper im Kernel-Modus, der privilegierte Prozessoperationen ohne erforderliche Handles ermöglicht. Verwendet Pointer-Hooking von...

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

Introduction CoolClient is a backdoor family attributed to the HoneyMyte APT group also known as Mustang Panda that has been used in their cyber-espionage campaigns targeting organizations across Asia and Russia. It supports such capabilities as keylogging, clipboard theft, credential harvesting,...

PT-2026-64265

Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory. Out of bounds accesses triggered by malware introduced to a Guest KMD could allow privilege escalation which escapes...

CVE-2026-50396 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

CVE-2026-50393

CVE-2026-50393 is a Windows kernel-mode driver use-after-free vulnerability that enables local privilege escalation by an authorized attacker. The entry is supported by multiple sources in connected documents, including NVD/MSRC summaries. Affected component: Windows Kernel-Mode Drivers (kernel s...

CVE-2026-50393 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

CVE-2026-50393 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally...

PT-2026-58274

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A use after free issue in the Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally, potentially granti...

Important: libnvsdm

Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where a user could cause an incorrect permission assignment for a critical resource. A successful exploit of this vulnerability might lead to data tampering and denial of service...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003674)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003674 advisory. Insufficient input validation in Kernel Mode Driver in IntelR i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable...

CVE-2026-20859 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

CVE-2021-0196

Improper access control in kernel mode driver for some IntelR NUC 9 Extreme Laptop Kits before version 2.2.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-23277

NVIDIA Display Driver for Linux and Windows contains a vulnerability in the kernel mode driver, where an attacker could access memory outside bounds permitted under normal use cases. A successful exploit of this vulnerability might lead to denial of service, data tampering, or information...

CVE-2025-61155

The GameDriverX64.sys kernel-mode anti-cheat driver v7.23.4.7 and earlier contains an access control vulnerability in one of its IOCTL handlers. A user-mode process can open a handle to the driver device and send specially crafted IOCTL requests. These requests are executed in kernel-mode context...