CVE-2022-34671

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user-mode layer, where an unprivileged user can cause an out-of-bounds write, which may lead to code execution, information disclosure, and denial of service...

CVE-2024-0121

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure,...

PT-2025-2918 · Openvpn · Openvpn

Name of the Vulnerable Software and Affected Versions: OpenVPN ovpn-dco for Windows version 1.1.1 Description: The issue allows an unprivileged local attacker to send I/O control messages with invalid data to the driver, resulting in a NULL pointer dereference that leads to a system halt. This ca...

CVE-2025-21307 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability

...

CVE-2024-49090

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

PT-2024-9429 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This can allow an attacker to affect the system. The estimat...

Finding vulnerabilities in ClipSp, the driver at the core of Windows’ Client License Platform

By Philippe Laulheret ClipSP clipsp.sys is a Windows driver used to implement client licensing and system policies on Windows 10 and 11 systems. Cisco Talos researchers have discovered eight vulnerabilities related to clipsp.sys ranging from signature bypass to elevation of privileges and sandbox...

The vulnerability of the Windows USB Video Class System Driver for Windows operating systems allows attackers to gain elevated privileges.

The vulnerability of the Windows USB Video Class System Driver for Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of NVIDIA’s graphics driver for Windows, related to reading data beyond the buffer in memory, allows attackers to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges.

The vulnerability of NVIDIA’s graphics driver for Windows relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code, disclose sensitive information, cause system failures, or gain elevated privileges...

CVE-2024-43524

Windows Mobile Broadband Driver Remote Code Execution Vulnerability...

CVE-2024-43543

CVE-2024-43543 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The initial document states it affects Windows Mobile Broadband Driver and provides CVSS v3.1 metrics: AV/Physical, AC/Low, PR/None, UI/None, S/Unchanged; impacts Confidentiality, Integrity, Availability all ...

Microsoft Windows Mobile Broadband Driver 安全漏洞

Microsoft Windows Mobile Broadband Driver is a driver from Microsoft USA that allows the Windows operating system to communicate with mobile broadband devices. A security vulnerability exists in Microsoft Windows Mobile Broadband Driver. An attacker exploiting this vulnerability could remotely...

The vulnerability of the driver responsible for the computer’s interaction with the CLFS.sys device in the Windows operating system allows a hacker to trigger a Service-Breaking Failure (BSoD).

The vulnerability of the driver responsible for the computer’s interaction with CLFS.sys devices and devices in the Windows operating system is related to incorrect configuration data input. Exploiting this vulnerability can cause a Service-Breaking Failure BSoD through the forced invocation of t...

PT-2024-37127

Name of the Vulnerable Software and Affected Versions: Samsung Universal Print Driver for Windows versions prior to 2018 Description: The issue allows for escalation of privilege, enabling the creation of a reverse shell in the tool. This affects products released or manufactured before 2018...

CVE-2024-38193

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

CVE-2024-38144

Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability...

PT-2024-5695 · Microsoft · Kernel Streaming Wow Thunk Service Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel Streaming WOW Thunk Service Driver versions prior to the fixed version Description: The issue is related to a buffer overflow in the dynamic memory of the Kernel Streaming WOW Thunk Service Driver, which can be exploited to...