39 matches found
nuc-winring0-fix
Intel NUC WinRing0 Vulnerable Driver - Permanent Removal Guide Windows Defender flags OpenHardwareMonitorLib.sys WinRing0 driver as VulnerableDriver:WinNT/Winring0 due to CVE-2020-14979. This driver is bundled with Intel's NUC Software Studio service and gets reinstalled via Windows Update. This...
stop-zenbleed-win
Windows에서 ZenbleedCVE-2023-20593 차단하기 새로 발견된 Zenbleed 취약점CVE-2023-20593은 AMD의 모든 Zen2 프로세서에 영향을 줍니다. 안타깝게도 AMD는 2023년 11월 또는 12월까지 많은 프로세서에 마이크로코드 업데이트를 제공하지 않을 예정입니다. 그 사이 어떻게 안전을 유지할 수 있을까요? 다행히도 소프트웨어 해결 방법이 있습니다. Linux에서는 소프트웨어 해결 방법을 적용하는 것이 한 줄이면 되지만, Windows에서는 상황이 더 복잡합니다. 소프트웨어 해결 방법을...
Exploit for CVE-2020-14979
Intel NUC WinRing0 Vulnerable Driver - Permanent Removal Guide...
CVE-2025-63602
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
CVE-2025-63602
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
CVE-2025-63602
A vulnerability exists in Awesome Miner versions through 11.2.4 due to the implementation of an insecure version of the WinRing0 driver (version 1.2.0.5, renamed as IntelliBreeze.Maintenance.Service.sys ). The driver lacks a properly secured DACL , which allows unprivileged users to interact with...
EUVD-2025-198044
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
CVE-2025-63602
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
PT-2025-47330
Name of the Vulnerable Software and Affected Versions Awesome Miner versions through 11.2.4 Description A flaw exists in Awesome Miner that permits unauthorized read and write access to kernel memory and Model Specific Registers MSRs, including LSTAR, even for users without administrative...
Awesome Miner 安全漏洞
Awesome Miner is a cryptocurrency mining management software from the Awesome Miner organization. A security vulnerability exists in Awesome Miner version 11.2.4 and earlier, which stems from an improper implementation of the WinRing0 driver and could lead to local elevation of privilege and...
CVE-2025-63602
A vulnerability was discovered in Awesome Miner thru 11.2.4 that allows arbitrary read and write to kernel memory and MSRs such as LSTAR as an unprivileged user. This is due to the implementation of an insecure version of WinRing0 1.2.0.5, renamed to IntelliBreeze.Maintenance.Service.sys that lac...
EUVD-2020-7109
Malware in sbrugna...
CVE-2020-14979
The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low integrity processes, to read and write to arbitrary memory locations. This allows any user to gain NT AUTHORITY\SYSTEM privileges by mapping \Device\PhysicalMemory into the calli...
CVE-2020-22057
The WinRin0x64.sys and WinRing0.sys low-level drivers in EVGA Precision XOC version v6.2.7 were discovered to be configured with the default security descriptor which allows attackers to access sensitive components and data...
CVE-2021-44903
Micro-Star International MSI Center Pro = 2.0.16.0 is vulnerable to multiple Privilege Escalation LPE/EoP vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLibX64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by sending...
Privilege escalation
Micro-Star International MSI Center Pro = 2.0.16.0 is vulnerable to multiple Privilege Escalation LPE/EoP vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLibX64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by sending...
CVE-2021-44901
Micro-Star International MSI Dragon Center = 2.0.116.0 is vulnerable to multiple Privilege Escalation LPE/EoP vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLibX64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by...
CVE-2021-44899
Micro-Star International MSI Center = 1.0.31.0 is vulnerable to multiple Privilege Escalation vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLibX64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by sending specific IOC...
CVE-2021-44899
Micro-Star International MSI Center = 1.0.31.0 is vulnerable to multiple Privilege Escalation vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLibX64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by sending specific IOC...
CVE-2021-44901
Micro-Star International MSI Dragon Center = 2.0.116.0 is vulnerable to multiple Privilege Escalation LPE/EoP vulnerabilities in the atidgllk.sys, atillk64.sys, MODAPI.sys, NTIOLib.sys, NTIOLibX64.sys, WinRing0.sys, WinRing0x64.sys drivers components. All the vulnerabilities are triggered by...