Skip to content
Threat Feed
Subscribe

Vendor

MSI

3 briefs RSS
high advisory

Integer Overflow Vulnerability in MSI Dragon Center NTIOLib_X64.sys

A local integer overflow vulnerability in the MmioWritePath function of the MSI Dragon Center driver allows local attackers to escalate privileges via manipulation of argument count or element size parameters.

Dragon Center
1t 1c
critical advisory

Command Injection in MSI Radix AXE6600 Router

The MSI Radix AXE6600 router firmware version v781521 is vulnerable to remote command injection via the wps.cgi interface, allowing unauthenticated attackers to execute arbitrary commands with root privileges.

Radix AXE6600
1r 3t 11c
high advisory

CVE-2026-57851 — MSI Feature Manager Kernel Driver Local Privilege Escalation

A local privilege escalation vulnerability (CVE-2026-57851) exists in the MSI Feature Manager's KernCoreLib64.sys kernel driver that allows any local user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without requiring administrator privileges, enabling manipulation of kernel objects, tampering with kernel-mode callbacks, bypassing Protected Process Light, and disabling security software.

MSI Feature Manager privilege-escalation vulnerability windows driver-vulnerability
1t 1c