CVE-2021-42687: Buffer Copy without Checking Size of Input

A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

CVE-2021-42683: Buffer Copy without Checking Size of Input

A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

CVE-2021-42973: Integer Overflow or Wraparound

NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

CVE-2021-42685: Integer Overflow or Wraparound

An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 . The IOCTL Handler 0x22005B in the Accops HyWorks DVM Tools prior to v3.3.1.105 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via...

CVE-2021-42681: Buffer Copy without Checking Size of Input

A Buffer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

CVE-2021-43637: Buffer Copy without Checking Size of Input

Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

CVE-2021-43006: Integer Overflow or Wraparound

AmZetta Amzetta zPortal DVM Tools is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools = v3.3.148.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request...

CVE-2021-42990: Buffer Copy without Checking Size of Input

FlexiHub For Windows is affected by Buffer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allows local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Pack...

CVE-2021-42979: Integer Overflow or Wraparound

NoMachine Cloud Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request...

CVE-2021-42972: Buffer Copy without Checking Size of Input

NoMachine Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Packet...

Accops HyWorks 安全漏洞

Accops HyWorks is a suite of solutions consisting of software and hardware from Accops India. It is used to instantly and securely access enterprise applications remotely from anywhere, on any device and from any network. Accops HyWorks suffers from a buffer overflow vulnerability that can be...

CVE-2021-42993: Integer Overflow or Wraparound

FlexiHub For Windows is affected by Integer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Request Pack...

FlexiHub 安全漏洞

FlexiHub is a way for the FlexiHub team to share and access remote devices. A security vulnerability exists in flexhub For Windows, which can be exploited by a local attacker to cause a denial of service memory corruption and operating system crash by executing arbitrary code in kernel mode or vi...

PT-2021-23657

Name of the Vulnerable Software and Affected Versions Accops HyWorks Windows Client versions prior to 3.2.8.200 Description An Integer Overflow exists in the Accops HyWorks Windows Client, allowing local attackers to execute arbitrary code in kernel mode or cause a denial of service via specially...

CVE-2021-43003: Integer Overflow or Wraparound

Amzetta zPortal Windows zClient is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient = v3.2.8180.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted I/O Reque...

NVIDIA Windows GPU Display Driver (October 2021)

A display driver installed on the remote Windows host is affected by multiple vulnerabilities: - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for private IOCTLs, where an attacker with local unprivileged system access may cause a NUL...

AMD μProf 安全漏洞

AMD μProf is a performance analysis tool from AMD for applications running on Windows, Linux and FreeBSD operating systems. A security vulnerability exists in AMD μProf, which stems from the fact that the AMDPowerProfiler.sys driver may allow a low-privileged user to access the MSR in the kernel,...

CVE-2020-12964

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...

CVE-2020-12964

CVE-2020-12964 affects the AMD Radeon Kernel Driver Escape 0x2000c00 Call handler. A local attacker could escalate privileges, trigger a DoS via Windows BugCheck, or leak information. AMD’s bulletin AMD-SB-1000 associates mitigations with specific driver versions: AMD Radeon Software for Windows ...

CVE-2020-12964

A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows BugCheck or write to leak information...