Threats Tagged 'cwe-782'

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request by bypassing the driver's verification.Refer to the ' Security Update for Armoury Crate App  ' section on the ASUS Security Advisory for more information.

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification. Refer to the ' Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain a privilege escalation vulnerability in DirectIo64.sys that allows local users to clear arbitrary bits at any physical memory address due to missing validation of the physical address parameter in an exposed IOCTL handler. Attackers can obtain a device handle and supply an arbitrary 64-bit physical address with a bit index to invoke MmMapIoSpace and clear bits in kernel code pages or page table entries, enabling local privilege escalation or system compromise.

A local privilege escalation vulnerability exists in Unistal Systems Pvt. Ltd. Protegent 360 version 2.0.0.4. The issue involves the kernel driver pgsecdl.sys, which allows a local attacker to escalate privileges. This vulnerability has a high severity rating with a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability if exploited.

CVE-2026-9492 is an improper access control vulnerability in the MBStorage DRAM lighting control module of Gigabyte Control Center. Authenticated local attackers can send specific IOCTL commands via the MyPortIO_x64.sys driver, allowing arbitrary physical memory read/write and kernel-level privilege escalation. The vulnerability has a high severity score of 8.5. No patch or official remediation has been confirmed yet.

An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM privileges.

CVE-2025-15641 is a vulnerability in the Netskope Client for Windows where a malicious insider with administrative privileges can send crafted IOCTL requests to the driver. This can bypass all anti-tampering protections for the Netskope Client. The issue affects all versions below R138. The vulnerability has a medium severity with a CVSS score of 6.8.

CVE-2026-8501 is a high-severity vulnerability in the Symantec PC Tools Internet Security product. It involves improper access control in the PCTCore64.sys Windows kernel driver, allowing local user-mode processes to access privileged IOCTL handlers via the PCTCoreDriver WDM device interface. This can enable a local attacker with access to the driver to perform sensitive and privileged operations on the affected system. There is no confirmed patch or official remediation available at this time, and no known exploits have been reported in the wild.

An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a local user to bypass driver security mechanisms and obtain restricted touchpad information or render the touchpad unusable via crafted IOCTL requests.Refer to the ' Security Update for ASUS Precision Touchpad ' section on the ASUS Security Advisory for more information.