EUVD-2026-71683

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an improper access control vulnerability in the DirectIo64.sys kernel driver that allows unprivileged local users to perform privileged hardware operations by opening...

CVE-2025-27463

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The Windows PV drivers expose various facilities to userspace. Several of these have no security descriptor, and are therefore fully accessible to unprivileged users. The...

CVE-2026-8049

The SignalRGB kernel driver, SignalIo.sys (also referred to as SignalRgbDriver.sys), contains an improper access control vulnerability in versions prior to 1.3.7.0 . The \.\SignalIo device object is created without an explicit SDDL security descriptor or FILE_DEVICE_SECURE_OPEN, resulting in over...