CVE-2025-70795

STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. This is caused by insufficient caller validation in the driver's IOCTL handler, enabli...

CVE-2025-52915

The K7 Security Anti-Malware suite, specifically the K7RKScan.sys driver version 23.0.0.10 , contains a vulnerability allowing an admin-privileged user to send crafted IOCTL requests. The root cause is insufficient caller validation in the driver's IOCTL handler, which enables unauthorized proces...