CVE-2021-44900: Undefined Security Weakness

Micro-Star International MSI App Player = 4.280.1.6309 is vulnerable to multiple Privilege Escalation LPE/EoP vulnerabilities in the NTIOLibX64.sys and BstkDrvmsi2.sys drivers components. All the vulnerabilities are triggered by sending specific IOCTL requests...

PT-2022-12255

Name of the Vulnerable Software and Affected Versions MSI Center versions 1.0.31.0 and earlier Description The issue is related to multiple Privilege Escalation vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib X64.sys, WinRing0.sys, WinRing0x64.sys driver...

CVE-2021-44901: Undefined Security Weakness

Micro-Star International MSI Dragon Center = 2.0.116.0 is vulnerable to multiple Privilege Escalation LPE/EoP vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLibX64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by...

CVE-2021-44903: Undefined Security Weakness

Micro-Star International MSI Center Pro = 2.0.16.0 is vulnerable to multiple Privilege Escalation LPE/EoP vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLibX64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by sending...

PT-2022-12256

Name of the Vulnerable Software and Affected Versions MSI App Player versions 4.280.1.6309 and earlier Description The issue concerns multiple Privilege Escalation vulnerabilities in the NTIOLib X64.sys and BstkDrv msi2.sys driver components. These vulnerabilities can be triggered by sending...

PT-2022-12258

Name of the Vulnerable Software and Affected Versions Micro-Star International MSI Center Pro version 2.0.16.0 and earlier Description The issue concerns multiple Privilege Escalation vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib X64.sys, WinRing0.sys, and...

PT-2022-12257

Name of the Vulnerable Software and Affected Versions Micro-Star International MSI Dragon Center version 2.0.116.0 and earlier Description The issue concerns multiple Privilege Escalation vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLib X64.sys, WinRing0.sys, an...

CVE-2021-44899: Undefined Security Weakness

Micro-Star International MSI Center = 1.0.31.0 is vulnerable to multiple Privilege Escalation vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLibX64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by sending specific IOC...

rhel bug fix update

An update is available for libguestfs, libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, libvirt, netcf, perl-Sys-Virt, seabios, qemu-kvm, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a...

Mageia: Security Advisory (MGASA-2018-0047)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0162)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-202107-24 : Binutils: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-24 Binutils: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Binutils. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

CVE-2021-44852

An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code. This is...

CVE-2021-44852

An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code. This is...

Design/Logic Flaw

An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code. This is...

CVE-2021-44852

CVE-2021-44852 affects Biostar RACING GT Evo’s BS_RCIO64.sys driver. A low-integrity process can open the driver object and issue IOCTLs (0x226040, 0x226044, 0x226000) to read/write arbitrary physical memory or call an arbitrary address, enabling arbitrary code execution. Affected version: Biosta...

CVE-2021-44852

An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code. This is...

CVE-2021-44852: Undefined Security Weakness

An issue was discovered in BSRCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the driver's device object and issue IOCTLs to read or write to arbitrary physical memory locations or call an arbitrary address, leading to execution of arbitrary code. This is...

CVE-2020-22061

SUPERAntispyware v8.0.0.1050 was discovered to contain an issue in the component saskutil64.sys. This issue allows attackers to arbitrarily write data to the device via IOCTL 0x9C402140...

Design/Logic Flaw

The WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC version v6.2.7 were discovered to be configured with the default security descriptor which allows attackers to access sensitive components and data...