Driver Vulnerability

Multiple memory corruption and validation vulnerabilities in HMS Networks PEAK-System Windows drivers allow local attackers to induce a system kernel crash.

A local privilege escalation vulnerability (CVE-2022-45451) in the Acronis ngscan.sys minifilter driver allows low-privileged attackers to perform arbitrary file reads and interact with sensitive registry keys.

A write-what-where vulnerability in the BSMEM64_W10.sys driver of the BioStar BIOS Update Utility 1.9.7.3 allows local attackers to achieve privilege escalation.

Kingston FURY CTRL RGB Control Software version 2.0.65.0 contains a vulnerability in the NTIOLib_KSFX.sys driver that allows for local privilege escalation due to improper privilege management.

An Improper Access Control vulnerability (CVE-2026-9492) in the MBStorage DRAM lighting control module of Gigabyte Control Center (GCC) allows authenticated local attackers to achieve kernel-level privileges by sending specific IOCTL commands to the `MyPortIO_x64.sys` driver, enabling arbitrary physical memory read/write.

A heap-based buffer overflow vulnerability, CVE-2026-15506, in the `saappctl.sys` driver of SecureAge CatchPulse versions up to 10.9.3 allows a local attacker to achieve privilege escalation, and an exploit has been publicly disclosed.

A local privilege escalation vulnerability (CVE-2026-57851) exists in the MSI Feature Manager's KernCoreLib64.sys kernel driver that allows any local user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without requiring administrator privileges, enabling manipulation of kernel objects, tampering with kernel-mode callbacks, bypassing Protected Process Light, and disabling security software.

CVE-2026-46163 is a vulnerability in the b43legacy WiFi driver related to a missing bounds check on the firmware key index in the RX path, potentially leading to memory corruption.

A memory corruption vulnerability, CVE-2025-47408, exists in Qualcomm drivers when another driver calls an IOCTL with an invalid input/output buffer, potentially leading to code execution or denial of service.

A memory corruption vulnerability exists in Qualcomm camera sensor drivers due to insufficient output buffer size validation during IOCTL processing, potentially leading to arbitrary code execution.