6244 matches found
CVE-2025-61155
CVE-2025-61155 — Arbitrary Process Termination in GameDriverX64.sys A signed kernel-mode anti-cheat driver — GameDriverX64.sys, shipped with Tower of Fantasy Hotta Studio / Perfect World — lets any unprivileged local user terminate arbitrary processes , including PPL-protected antivirus/EDR...
recon_2024_windbg_workshop
REcon 2024 - Tips & Tricks for better debugging with WinDbg This repository contains the materials created for the workshop "Tips & Tricks for better debugging with WinDbg", at REcon 2024. Setup The workshop materials aims to provide useful features for WinDbg, when debugging in kernel-mode, but...
access_updated
Singular Access Updated fork ofbtbd/access with Zydis-based dynamic pattern finding for Windows 10/11 compatibility A kernel-mode syscall wrapper that enables privileged process operations without requiring handles. Uses xKdEnumerateDebuggingDevices pointer hooking for kernel-usermode...
Driver-kaldereta
Kaldereta Unsigned Kernel Mode Driver that does memory modifications Features get process id get base address of an image change protection of a memory region allocate memory region free memory read/write from address read/write from address with offset read from memory to buffer write to memory...
CVE-2026-19595
The user-mode syscall verifier zvrfyrtiocqegetmempoolbuffer in subsys/rtio/rtiosyscalls.c validated its two output parameters, buff and bufflen, with KSYSCALLMEMORYREAD rather than KSYSCALLMEMORYWRITE. Both are pure out-parameters: zimplrtiocqegetmempoolbuffer stores the mempool buffer address an...
CVE-2026-19595 Zephyr RTIO syscall verifier validates output parameters for read instead of write access
The user-mode syscall verifier zvrfyrtiocqegetmempoolbuffer in subsys/rtio/rtiosyscalls.c validated its two output parameters, buff and bufflen, with KSYSCALLMEMORYREAD rather than KSYSCALLMEMORYWRITE. Both are pure out-parameters: zimplrtiocqegetmempoolbuffer stores the mempool buffer address an...
CVE-2026-19595 Zephyr RTIO syscall verifier validates output parameters for read instead of write access
The user-mode syscall verifier zvrfyrtiocqegetmempoolbuffer in subsys/rtio/rtiosyscalls.c validated its two output parameters, buff and bufflen, with KSYSCALLMEMORYREAD rather than KSYSCALLMEMORYWRITE. Both are pure out-parameters: zimplrtiocqegetmempoolbuffer stores the mempool buffer address an...
CVE-2026-19595
The Zephyr RTOS contains a vulnerability in the RTIO syscall verifier located in subsys/rtio/rtio_syscalls.c. The function z_vrfy_rtio_cqe_get_mempool_buffer() incorrectly validates the output parameters buff and buff_len using K_SYSCALL_MEMORY_READ() instead of K_SYSCALL_MEMORY_WRITE(). Because ...
PT-2026-117695
Name of the Vulnerable Software and Affected Versions Zephyr OS affected versions not specified Description An issue exists in the user-mode syscall verifier z vrfy rtio cqe get mempool buffer within subsys/rtio/rtio syscalls.c. The verifier incorrectly uses K SYSCALL MEMORY READ instead of K...
CVE-2026-96915
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-96865
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...
CVE-2026-96849
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
CVE-2026-96247
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
CVE-2026-85871
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-85857
Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
CVE-2026-83834
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-83837
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...
CVE-2026-83637
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...