EUVD-2011-3371

Malware in sbrugna...

CVE-2025-46715 Sandboxie Arbitrary Kernel Write in SbieDrv.sys API (API_GET_SECURE_PARAM)

Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. Starting in version 1.3.0 and prior to version 1.15.12, ApiGetSecureParam fails to sanitize incoming pointers, and implicitly trusts that the pointer the user has passed in is safe to write t...

CVE-2025-46715

Sandboxie is affected by CVE-2025-46715 due to Api_GetSecureParam not sanitizing incoming pointers, allowing a kernel pointer to be written by GetRegValue to a chosen SBIE registry entry. This enables an attacker to dump registry contents via SbieDrv.sys on Windows systems, including low integrit...

CVE-2020-14979

The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low integrity processes, to read and write to arbitrary memory locations. This allows any user to gain NT AUTHORITY\SYSTEM privileges by mapping \Device\PhysicalMemory into the calli...