This vulnerability involves STProcessMonitor 11.11.4.0's driver IOCTL handler lacking sufficient validation of the caller, enabling an admin-privileged user to send a crafted IOCTL request (0xB822200C) that terminates processes protected by a third-party implementation. The flaw allows unauthorized processes to execute termination commands in kernel space, potentially disrupting critical services or applications and causing denial of service. The CVSS vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high availability impact.

Successful exploitation results in denial of service by terminating protected processes, which can disrupt critical third-party services or applications. There is no impact on confidentiality or integrity according to the CVSS vector. The attack requires local access with low privileges and no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict admin-privileged user access and monitor for suspicious use of IOCTL requests related to process termination. Avoid running untrusted code with admin privileges that could exploit this vulnerability.