PT-2026-2558

Name of the Vulnerable Software and Affected Versions NSecsoft NSecKrnl versions prior to January 2026 Description The NSecKrnl Windows driver contains a flaw that allows a local, authenticated attacker to terminate processes owned by other users, including SYSTEM and Protected Processes. This is...

Microsoft Windows Ancillary Function Driver for WinSock 安全漏洞

Microsoft Windows Ancillary Function Driver for WinSock is an ancillary function driver for Winsock from Microsoft USA. An elevation of privilege vulnerability exists in the Microsoft Windows Ancillary Function Driver for WinSock due to a type obfuscation flaw in the auxiliary function driver for...

NSecKrnl driver terminates system processes with crafted IOCTL requests

RISK EVALUATION NSecsoft 'NSecKrnl' is a Windows driver that allows a local, authenticated attacker to terminate processes owned by other users, including SYSTEM and Protected Processes by issuing crafted IOCTL requests to the driver. 2. RECOMMENDED PRACTICES Enable the Windows Vulnerable Driver...

CVE-2021-33059

Improper input validation in the IntelR Administrative Tools for IntelR Network Adapters driver for Windows before version 1.4.0.15, may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0135

Improper input validation in the IntelR Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to potentially enable escalation of privilege via local access...

Exploit for CVE-2025-0288

CVE-2025-0287 This repository contains a screenshot of the vu...

HPESB3P04984 rev.5 - HPE ProLiant DL/ML/XD Alletra and Synergy Servers Using Intel QuickAssist Technology Software Drivers, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute XD230 - Prior to v2.6.0 - Intel QuickAssist Technology driver for Microsoft Windows HPE Alletra Storage...

CVE-2025-62470

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-62470 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2025-62470

CVE-2025-62470 is a heap-based buffer overflow in the Windows Common Log File System (CLFS) Driver that enables a locally authenticated attacker to escalate privileges. The vulnerability affects the CLFS driver in Windows, with local access required and high impact on confidentiality, integrity, ...

CVE-2025-33029

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...

CVE-2025-35963

Insufficient control flow management for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of...

CVE-2025-60719

Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2025-60709

Out-of-bounds read in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-62213

Technical details about CVE-2025-62213 (affected component, root cause, impact, remediation) are not disclosed in the provided documents; no specifics on exploitability or affected products are available here; monitor for updates.

EUVD-2025-93426

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2025-60719 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2025-60719

Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2025-35971

Out-of-bounds write for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring 2: Device Drivers may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This...

CVE-2025-20622

Intel NPU Drivers for Windows prior to version 32.0.100.4023 are affected by a vulnerability where sensitive information is not cleared before release for reuse, potentially allowing data exposure. The issue occurs in Ring 3: User Applications and can be exploited by an authenticated, unprivilege...