CVE-2025-0286

CVE-2025-0286 affects Paragon's BioNTdrv.sys driver used by Paragon Hard Disk Manager/Partition Manager. The vulnerability is an arbitrary kernel memory write caused by failure to properly validate the length of user-supplied data, enabling a local attacker to potentially execute arbitrary code w...

CVE-2025-0287 CVE-2025-0287

Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation...

CVE-2025-0287 CVE-2025-0287

Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation...

CVE-2025-0287

CVE-2025-0287 is a null pointer dereference in Paragon Software’s BioNTdrv.sys driver used by the Hard Disk Manager/Partition Manager product line. Affected driver versions include 1.3.0.0 and 1.5.1.0 (and related 10.1.x.y family), where absence of a valid MasterLrp structure in the input buffer ...

CVE-2025-0288

CVE-2025-0288 concerns Paragon Partition Manager’s BioNTdrv.sys. A memmove-based vulnerability allows writing arbitrary kernel memory, enabling local privilege escalation to SYSTEM. Affected driver versions include 1.3.0.0, 1.4.0.0, 1.5.1.0 (and related HDM variants); exploitation can be performe...

CVE-2025-0288 CVE-2025-0288

Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalatio...

CVE-2025-0288 CVE-2025-0288

Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalatio...

CVE-2025-0289 CVE-2025-0289

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service...

CVE-2025-0289 CVE-2025-0289

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service...

CVE-2025-0289

CVE-2025-0289 affects Paragon Software BioNTdrv.sys in the Hard Disk Manager product line. The driver does not validate the MappedSystemVa pointer before passing it to HalReturnToFirmware, enabling a local attacker to compromise the service and escalate privileges (potential SYSTEM-level access)....

Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks

Threat actors have been exploiting a security vulnerability in Paragon Partition Manager's BioNTdrv.sys driver in ransomware attacks to escalate privileges and execute arbitrary code. The zero-day flaw CVE-2025-0289 is part of a set of five vulnerabilities that was discovered by Microsoft,...

Paragon Partition Manager 输入验证错误漏洞

Paragon Partition Manager is a powerful professional-grade disk partition management software from Paragon. It is used for hard disk partition resizing, file system conversion, data backup recovery and so on. An input validation error vulnerability exists in Paragon Partition Manager version 17,...

Paragon Partition Manager 代码问题漏洞

Paragon Partition Manager is a powerful professional-grade disk partition management software from Paragon. It is used for hard disk partition adjustment, file system conversion, data backup and recovery, etc. A code issue vulnerability exists in Paragon Partition Manager version 7.9.1, which ste...

Paragon Partition Manager 缓冲区错误漏洞

Paragon Partition Manager is a powerful professional-grade disk partition management software from Paragon. It is used for hard disk partition resizing, file system conversion, data backup recovery and so on. A buffer error vulnerability exists in Paragon Partition Manager version 7.9.1, which...

Paragon Partition Manager 安全漏洞

Paragon Partition Manager is a powerful professional-grade disk partition management software from Paragon. It is used for hard disk partition resizing, file system conversion, data backup and recovery, etc. A security vulnerability exists in Paragon Partition Manager version 7.9.1, which...

Paragon Partition Manager 输入验证错误漏洞

Paragon Partition Manager is a powerful professional-grade disk partition management software from Paragon. It is used for hard disk partition resizing, file system conversion, data backup recovery and so on. An input validation error vulnerability exists in Paragon Partition Manager version 7.9....

PT-2025-9249

Name of the Vulnerable Software and Affected Versions Paragon Partition Manager version 7.9.1 Description The issue is caused by a null pointer dereference vulnerability within biontdrv.sys, resulting from a lack of a valid MasterLrp structure in the input buffer. This allows an attacker to execu...

PT-2025-9181

Name of the Vulnerable Software and Affected Versions Paragon Partition Manager version 17 Paragon Partition Manager versions prior to 2.0.0 Description The issue is related to an insecure kernel resource access vulnerability in the BioNTdrv.sys driver, which can be exploited to compromise the...

Paragon Software Hard Disk Manager product line contains five memory vulnerabilities within its BioNTdrv.sys driver that allow for privilege escalation and denial-of-service (DoS) attacks

Overview The Paragon Software Hard Disk Manager HDM product line contains a vulnerable driver titled BioNTdrv.sys. The driver, versions 10.1.X.Y and older, 1.0.0.0, 1.1.0.0, 1.3.0.0, 1.4.0.0, and 1.5.1.0, contain five vulnerabilities. These include arbitrary kernel memory mapping and write...

PT-2025-9247 · Paragon · Paragon Partition Manager

Name of the Vulnerable Software and Affected Versions: Paragon Partition Manager version 7.9.1 Description: The issue is caused by a failure to properly validate the length of user-supplied data, leading to an arbitrary kernel memory mapping vulnerability within the biontdrv.sys component. This c...