The vulnerability of the Windows operating system driver LUAFV (luafv.sys), which allows a hacker to increase their privileges

The vulnerability of the Windows operating system driver LUAFV luafv.sys is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2021-1542 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows LUAFV driver, which can be exploited to elevate privileges. This allows an attacker to affect the system. There is no...

CVE-2021-1054

NVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in which the software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action, whi...

Cmcm Drivergenius Buffer Error Vulnerability

Cmcm Drivergenius Driver Genius is a software for Windows system to solve the driver adaptation update and download from the Chinese company Beijing Cheetah Mobile Technology Co Ltd Cmcm. DriverGenius 9.61.3708.3054 MyDrivers64.sys suffers from a buffer error vulnerability that can be exploited b...

HackSysExtremeVulnerableDriver

This is a repository for the HackSys Extreme Vulnerable Driver HEVD, a tool for testing and demonstrating various types of vulnerabilities in Windows drivers. The repository contains build scripts for both 32-bit and 64-bit architectures on Windows and Linux. The repository includes scripts for...

Intel Thunderbolt DCH drivers information disclosure vulnerability

Intel Thunderbolt DCH drivers is a driver from Intel Corporation USA for Windows. A security vulnerability exists in the IntelR ThunderboltTM DCH drivers, which arises from a protection mechanism failure that could allow an authenticated user to potentially enable privileged escalation via local...

Updates to XenVIF Windows I/O driver - For Citrix Hypervisor and XenServer

Who Should Read This Article? This information is for customers using Citrix Hypervisor or XenServer who are entitled to receive automatic Windows I/O driver updates on their Windows VMs. Latest version The following versions of XenVIF are the latest that are available through Windows Automatic...

Updates to XenVBD Windows I/O driver - For Citrix Hypervisor and XenServer

Who Should Read This Article? This information is for customers using Citrix Hypervisor or XenServer who are entitled to receive automatic Windows I/O driver updates on their Windows VMs. Latest version The following versions of XenVBD are the latest that are available through Windows Automatic...

CVE-2020-1115

An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have...

Binary Vulnerability in Windows rndis 5.1 Driver

rndis is the remote network driver interface protocol for W10 systems. A binary vulnerability exists in the Windows rndis 5.1 driver, which can be exploited by attackers to cause a denial-of-service attack...

The vulnerability of the JET Database Engine database driver for Windows operating systems, related to object handling errors in memory, allows a hacker to execute arbitrary code.

The vulnerability of the JET Database Engine database driver for Windows operating systems exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

CVE-2019-14613

Improper access control in driver for IntelR VTuneTM Amplifier for Windows before update 8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0615

An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory, aka 'Windows Common Log File System Driver Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0639...

CVE-2019-11096

Insufficient memory protection for IntelR Ethernet I218 Adapter driver for Windows 10 before version 24.1 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-6183

A denial of service vulnerability has been reported in Lenovo Energy Management Driver for Windows 10 versions prior to 15.11.29.7 that could cause systems to experience a blue screen error. Lenovo Energy Management is a client utility. Lenovo XClarity Energy Manager is not affected...

CVE-2019-1214

An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'...

CVE-2019-11163

Insufficient access control in a hardware abstraction driver for IntelR Processor Identification Utility for Windows before version 6.1.0731 may allow an authenticated user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

The vulnerability of the vm3dmp driver for the VMware Tools utility on Windows operating systems allows a hacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the VMware Tools utility’s driver vm3dmp for Windows operating systems arises from reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...

CVE-2019-0707

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it.To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

The vulnerability of the LUAFV driver for Windows operating systems allows a hacker to execute arbitrary code and increase their privileges.

The vulnerability of the Windows operating system’s driver, luafv.sys, is related to errors in driver call handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and gain elevated privileges...