Threats Tagged 'cwe-782'
View all threats tagged with 'cwe-782'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cwe-782'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-8797: CWE-782: Exposed IOCTL with Insufficient Access Control in NEC Corporation ExpressUpdate Agent for WindowsCVE-2026-8797 0 An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges. Join the discussion | CVE Database V5 | 06/26/2026, 04:14:19 UTC Added: 06/26/2026, 05:01:13 UTC |
CVE-2025-15641: CWE-782 Exposed IOCTL with insufficient access control in Netskope Netskope ClientCVE-2025-15641 0 CVE-2025-15641 is a vulnerability in the Netskope Client for Windows where a malicious insider with administrative privileges can send crafted IOCTL requests to the driver. This can bypass all anti-tampering protections for the Netskope Client. The issue affects all versions below R138. The vulnerability has a medium severity with a CVSS score of 6.8. Join the discussion | CVE Database V5 | 06/17/2026, 01:31:51 UTC Added: 06/17/2026, 02:00:35 UTC |
CVE-2026-8501: CWE-782: Exposed IOCTL with Insufficient Access Control in Symantec PC Tools Internet SecurityCVE-2026-8501 0 CVE-2026-8501 is a high-severity vulnerability in the Symantec PC Tools Internet Security product. It involves improper access control in the PCTCore64.sys Windows kernel driver, allowing local user-mode processes to access privileged IOCTL handlers via the PCTCoreDriver WDM device interface. This can enable a local attacker with access to the driver to perform sensitive and privileged operations on the affected system. There is no confirmed patch or official remediation available at this time, and no known exploits have been reported in the wild. Join the discussion | CVE Database V5 | 06/01/2026, 16:25:11 UTC Added: 06/01/2026, 17:04:39 UTC |
Showing 1 to 3 of 3 results