CVE-2019-7247

An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

Privilege escalation

An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

Privilege escalation

An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution an...

CVE-2019-7246

An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution an...

CVE-2019-7247

CVE-2019-7247 affects AMD OverDrive’s AODDriver2.sys. The driver exposes wrmsr via IOCTL 0x81112ee0 and fails to properly filter MSRs, enabling arbitrary MSR writes that can lead to Ring-0 code execution and privilege escalation. Documents from Red Hat and other sources corroborate the same flaw....

PT-2020-11239

Name of the Vulnerable Software and Affected Versions AMD OverDrive affected versions not specified Description An issue was discovered in AODDriver2.sys, where the vulnerable driver exposes a wrmsr instruction via IOCTL "0x81112ee0" and does not properly filter the Model Specific Register MSR...

CVE-2019-7247: Undefined Security Weakness

An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges...

PT-2020-11238

Name of the Vulnerable Software and Affected Versions AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility version 5.11.9.0 Description An issue was discovered in the atillk64.sys driver, which exposes a wrmsr instruction and does not properly filter the Model Specific Register MSR...

CVE-2019-7246: Undefined Security Weakness

An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register MSR. Allowing arbitrary MSR writes can lead to Ring-0 code execution an...

PT-2020-10743

Name of the Vulnerable Software and Affected Versions ServiceNow IT Service Management versions Kingston through Patch 14-1 ServiceNow IT Service Management versions London through Patch 7 ServiceNow IT Service Management versions Madrid before patch 4 Description The issue allows stored XSS via...

RUSTSEC-2020-0056 stdweb is unmaintained

The author of the stdweb crate is unresponsive. Maintained alternatives: - wasm-bindgen - js-sys - web-sys...

stdweb is unmaintained

The author of the stdweb crate is unresponsive. Maintained alternatives: - wasm-bindgen - js-sys - web-sys...

PT-2020-13118

Name of the Vulnerable Software and Affected Versions: G.SKILL Trident Z Lighting Control versions 1.00.08 and earlier Description: The issue allows local non-privileged users to access sensitive operations, including mapping and un-mapping of physical memory, reading and writing to Model Specifi...

AMD ATI atillk64.sys Elevation of Privilege Vulnerability

AMD ATI atillk64.sys is an American AMD driver that enables Windows to control computer hardware. A security vulnerability exists in AMD ATI atillk64.sys version 5.11.9.0. The vulnerability can be exploited by an attacker to gain NT AUTHORITYSYSTEM privileges with the help of DeviceIoControl call...

CVE-2020-12138

AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process. This could enable low-privileged users to achieve NT AUTHORITY\SYSTEM...

Design/Logic Flaw

AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process. This could enable low-privileged users to achieve NT AUTHORITY\SYSTEM...

CVE-2020-12138

CVE-2020-12138 affects the AMD ATI atillk64.sys driver (version 5.11.9.0). The driver allows low-privileged users to map physical memory into their process space via MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages, enabling potential NT AUTHORITY\SYSTEM privilege escal...

PT-2020-13060

Name of the Vulnerable Software and Affected Versions atillk64.sys version 5.11.9.0 Description The issue allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process...

CVE-2020-12138

AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process. This could enable low-privileged users to achieve NT AUTHORITY\SYSTEM...

CVE-2020-12138: Missing Authorization

AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process. This could enable low-privileged users to achieve NT AUTHORITY\SYSTEM...