CVE-2021-36924

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve a pool overflow leading to Escalation of Privileges, Denial of Service, and Code Execution via a crafted Device IO Control packet to a device...

CVE-2021-36922

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB devices Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure via a crafted Device IO Control packet to a...

Design/Logic Flaw

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve a pool overflow leading to Escalation of Privileges, Denial of Service, and Code Execution via a crafted Device IO Control packet to a device...

CVE-2021-36923

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions leading to Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosur...

CVE-2021-36923

Summary: CVE-2021-36923 affects Realtek RtsUpx USB Utility Driver (Realtek RtsUpx.sys) up to version 1.14.0.0. The root cause is an access-control/IOCTL handling flaw that permits local, low-privileged users to access privileged USB IN/OUT operations. This can enable escalation of privileges, den...

CVE-2021-36922

CVE-2021-36922 affects Realtek RtsUpx USB Utility Driver (Realtek RtsUpx.sys) for Camera/Hub/Audio up to version 1.14.0.0. The root cause is failure to perform privilege checks on device IO control packets, enabling local, low-privilege users to gain unauthorized access to USB devices. Impact inc...

CVE-2021-36922

RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB devices Escalation of Privileges, Denial of Service, Code Execution, and Information Disclosure via a crafted Device IO Control packet to a...