CVE-2025-0289

CVE-2025-0289 affects Paragon Software BioNTdrv.sys in the Hard Disk Manager product line. The driver does not validate the MappedSystemVa pointer before passing it to HalReturnToFirmware, enabling a local attacker to compromise the service and escalate privileges (potential SYSTEM-level access)....

CVE-2025-0288

CVE-2025-0288 concerns Paragon Partition Manager’s BioNTdrv.sys. A memmove-based vulnerability allows writing arbitrary kernel memory, enabling local privilege escalation to SYSTEM. Affected driver versions include 1.3.0.0, 1.4.0.0, 1.5.1.0 (and related HDM variants); exploitation can be performe...

CVE-2025-0287

CVE-2025-0287 is a null pointer dereference in Paragon Software’s BioNTdrv.sys driver used by the Hard Disk Manager/Partition Manager product line. Affected driver versions include 1.3.0.0 and 1.5.1.0 (and related 10.1.x.y family), where absence of a valid MasterLrp structure in the input buffer ...

CVE-2025-0285

CVE-2025-0285 affects Paragon Partition Manager/BioNTdrv.sys. The vulnerability is an arbitrary kernel memory mapping flaw caused by improper validation of user-supplied data lengths in biontdrv.sys (versions around 7.9.1). Exploitation can lead to LOCAL privilege escalation to SYSTEM; BYOVD use ...

CVE-2025-0286

CVE-2025-0286 affects Paragon's BioNTdrv.sys driver used by Paragon Hard Disk Manager/Partition Manager. The vulnerability is an arbitrary kernel memory write caused by failure to properly validate the length of user-supplied data, enabling a local attacker to potentially execute arbitrary code w...