CVE-2024-33219

CVE-2024-33219 affects the AsIO64.sys component in ASUSTeK (ASUS) SABERTOOTH X99 Driver v1.0.1.0. The issue allows local privilege escalation and arbitrary code execution via specially crafted IOCTL requests, with a CVSS v3.1 base score of 7.8 (Impact: Confidentiality, Integrity, Availability Hig...

PT-2024-25155 · Asustek Computer · Asus Sabertooth X99 Driver

Name of the Vulnerable Software and Affected Versions: ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver version 1.0.1.0 Description: An issue in the component AsIO64.sys allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Recommendations: For...

Wistron Corporation TBT Force Power Control 安全漏洞

Wistron Corporation TBT Force Power Control is a power management solution from Wistron Corporation China. A security vulnerability exists in Wistron Corporation TBT Force Power Control version v1.0.0.0, which originates from a security flaw in the component Access64.sys. The vulnerability can be...

ASUS ATSZIO Driver 安全漏洞

ASUS ATSZIO Driver is a driver from Asus China. A security vulnerability exists in ASUS ATSZIO Driver version v0.2.1.7, which originates from a security flaw in the component ATSZIO 64.sys. The vulnerability can be exploited by an attacker to elevate privileges and execute arbitrary code by sendi...

PT-2024-25154 · Asustek Computer · Asus Usb 3.0 Boost Storage Driver

Name of the Vulnerable Software and Affected Versions: ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver version 5.30.20.0 Description: An issue in the component AsUpIO64.sys allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Recommendation...

PT-2024-25162 · Wistron · Tbt Force Power Control

Name of the Vulnerable Software and Affected Versions: Wistron Corporation TBT Force Power Control version 1.0.0.0 Description: An issue in the component Access64.sys allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Recommendations: For versio...

Insyde Software Corp SEG Windows Driver 安全漏洞

Insyde Software Corp SEG Windows Driver is a driver for managing and processing system events from Insyde Software Corp China. A security vulnerability exists in Insyde Software Corp SEG Windows Driver version v100.00.07.02, which originates from a security flaw in the component segwindrvx64.sys...

Realtek Semiconductor Corp Realtek(r) High Definition Audio Function Driver 安全漏洞

Realtek Semiconductor Corp Realtekr High Definition Audio Function Driver is a High Definition Audio Driver from Realtek Semiconductor Corp, China. A security vulnerability exists in Realtek Semiconductor Corp Realtekr High Definition Audio Function Driver version v6.0.9549.1, which originates fr...

PT-2024-25157 · Asustek Computer · Aisuite3

Name of the Vulnerable Software and Affected Versions: AISuite3 version 3.03.36 Description: An issue in the component AslO3 64.sys allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests. Recommendations: For version 3.03.36, consider disabling the...

ASUS AI Suite 安全漏洞

ASUS AI Suite is a comprehensive system management software from Asus China. ASUS AI Suite v3.03.36 A security vulnerability exists in version 3.03.36, which stems from a security flaw in group AslO364.sys. An attacker can exploit the vulnerability to elevate privileges and execute arbitrary code...

ASUS SABERTOOTH X99 Driver 安全漏洞

ASUS SABERTOOTH X99 Driver is a high-performance motherboard based on the Intel X99 chipset from China's ASUS. A security vulnerability exists in ASUS SABERTOOTH X99 Driver version v1.0.1.0, which originates from a security flaw in the component AsIO64.sys. The vulnerability can be exploited by a...

Realtek Semiconductor Corp Realtek lO Driver 安全漏洞

Realtek Semiconductor Corp Realtek lO Driver is a driver from Realtek Semiconductor Corp, China. A security vulnerability exists in Realtek Semiconductor Corp Realtek lO Driver version v1.008.0823.2017, which stems from a security flaw in the component rtkio64.sys. An attacker can exploit the...

CVE-2024-31756

An issue in MarvinTest Solutions Hardware Access Driver v.5.0.3.0 and before and fixed in v.5.0.4.0 allows a local attacker to escalate privileges via the Hw65.sys component...

CVE-2024-31756

The CVE-2024-31756 entry affects MarvinTest Solutions Hardware Access Driver, specifically version 5.0.3.0 and earlier. The root cause is an issue in the Hw65.sys component that enables local privilege escalation. The issue is mitigated by upgrading to version 5.0.4.0; PT-2024-24197 also notes a ...

CVE-2021-47376

In the Linux kernel, the following vulnerability has been resolved: bpf: Add oversize check before call kvcalloc Commit 7661809d493b "mm: don't allow oversized kvmalloc calls" add the oversize check. When the allocation is larger than what kmalloc supports, the following warning triggered: WARNIN...

TeraByte Unlimited Image for Windows 安全漏洞

TeraByte Unlimited Image for Windows is a computer backup and recovery solution from TeraByte Unlimited. A security vulnerability exists in TeraByte Unlimited Image for Windows v.3.64.0.0 and earlier versions, which originates from a vulnerability that allows a local attacker to escalate privileg...

MarvinTest Solutions Hardware Access Driver 安全漏洞

MarvinTest Solutions Hardware Access Driver is a hardware access driver from MarvinTest Solutions, USA. A security vulnerability exists in MarvinTest Solutions Hardware Access Driver v.5.0.3.0 and prior versions, which originates from a vulnerability that allows a local attacker to escalate...

PT-2024-24197 · Marvintest Solutions · Marvintest Solutions Hardware Access Driver

Name of the Vulnerable Software and Affected Versions: MarvinTest Solutions Hardware Access Driver versions 5.0.3.0 and before Description: An issue in the Hardware Access Driver allows a local attacker to escalate privileges via the Hw65.sys component. Recommendations: For versions 5.0.3.0 and...

CVE-2024-3745

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...

CVE-2024-3745 MSI Afterburner v4.6.6.16381 Beta 3 - ACL Bypass

MSI Afterburner v4.6.6.16381 Beta 3 is vulnerable to an ACL Bypass vulnerability in the RTCore64.sys driver, which leads to triggering vulnerabilities like CVE-2024-1443 and CVE-2024-1460 from a low privileged user...