# CWE-782.

Every Advisory and CVE whose sources give the weakness CWE-782, newest first.

## Records, newest first

- [ASUS System Control Interface: An exposed IOCTL with insufficient access control in ASUS System Control Interface allows…](https://agentprime.io/advisories/CVE-2026-112116.md)
  `CVE-2026-112116` · CVE record: ASUS System Control Interface · CVSS 8.5 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-782
- [ALCPU Core Temp: The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access…](https://agentprime.io/advisories/CVE-2026-109836.md)
  `CVE-2026-109836` · CVE record: ALCPU Core Temp · CVSS 8.4 High · Not analysed yet · Published 3 Nov 2026 · Tags: CWE-782
- [Yungengxin Cloud Billing IOCTL Process Termination LWBilling64.sys sub_14000443C exposed ioctl with insufficient access control](https://agentprime.io/advisories/CVE-2026-108889.md)
  `CVE-2026-108889` · CVE record: Yungengxin Cloud Billing · CVSS 4.8 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: CWE-782
- [QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute ar…](https://agentprime.io/advisories/CVE-2026-84408.md)
  `CVE-2026-84408` · CVE record: QualitySoft Corporation QND Premium and 2 more · CVSS 8.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-782
- [ASUS Armoury Crate: Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local…](https://agentprime.io/advisories/CVE-2026-16003.md)
  `CVE-2026-16003` · CVE record: ASUS Armoury Crate · CVSS 2.0 Low · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-782
- [ASUS Armoury Crate: Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local…](https://agentprime.io/advisories/CVE-2026-16004.md)
  `CVE-2026-16004` · CVE record: ASUS Armoury Crate · CVSS 5.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-782
- [ASUS Armoury Crate: Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user…](https://agentprime.io/advisories/CVE-2026-75809.md)
  `CVE-2026-75809` · CVE record: ASUS Armoury Crate · CVSS 5.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-782
- [PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sys](https://agentprime.io/advisories/CVE-2026-80117.md)
  `CVE-2026-80117` · CVE record: PassMark Software PerformanceTest and 2 more · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-782
- [PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL](https://agentprime.io/advisories/CVE-2026-80116.md)
  `CVE-2026-80116` · CVE record: PassMark Software PerformanceTest and 2 more · CVSS 8.5 High · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-782
- [PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR Write IOCTL](https://agentprime.io/advisories/CVE-2026-80115.md)
  `CVE-2026-80115` · CVE record: PassMark Software PerformanceTest and 2 more · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: CWE-782
- [PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.sys IOCTL](https://agentprime.io/advisories/CVE-2026-80113.md)
  `CVE-2026-80113` · CVE record: PassMark Software PerformanceTest and 2 more · CVSS 6.9 Medium · Not analysed yet · Published 4 Sept 2026 · Tags: Memory corruption, CWE-782
- [An issue in Unistal Systems Pvt.](https://agentprime.io/advisories/CVE-2026-38764.md)
  `CVE-2026-38764` · CVE record · CVSS 7.8 High · Not analysed yet · Published 23 Jul 2026 · Tags: Privilege escalation, CWE-782
- [An issue in Unistal Systems Pvt.](https://agentprime.io/advisories/CVE-2026-38766.md)
  `CVE-2026-38766` · CVE record · CVSS 7.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Privilege escalation, CWE-782
- [An issue in Unistal Systems Pvt.](https://agentprime.io/advisories/CVE-2026-38765.md)
  `CVE-2026-38765` · CVE record · CVSS 7.8 High · Not analysed yet · Published 22 Jul 2026 · Tags: Privilege escalation, CWE-782
- [ASUS AURA SYNC: \*\*UNSUPPORTED WHEN ASSIGNED\*\* Exposed IOCTL with Insufficient Access Control in the ASUS…](https://agentprime.io/advisories/CVE-2019-25764.md)
  `CVE-2019-25764` · CVE record: ASUS AURA SYNC · CVSS 7.3 High · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-782
- [GIGABYTE｜Gigabyte Control Center - Improper Access Control](https://agentprime.io/advisories/CVE-2026-9492.md)
  `CVE-2026-9492` · CVE record: GIGABYTE MBStorage · CVSS 8.5 High · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-782
- [MSI KernCoreLib64.sys Privilege Escalation via IOCTL Handlers](https://agentprime.io/advisories/CVE-2026-57851.md)
  `CVE-2026-57851` · CVE record: Micro-Star International (MSI) KernCoreLib64.sys · CVSS 8.5 High · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-782
- [An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows.](https://agentprime.io/advisories/CVE-2026-8797.md)
  `CVE-2026-8797` · CVE record: NEC Corporation ExpressUpdate Agent for Windows · CVSS 8.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: CWE-782
- [Dynabook Inc. Generic IO & Memory Access driver: Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook…](https://agentprime.io/advisories/CVE-2026-56129.md)
  `CVE-2026-56129` · CVE record: Dynabook Inc. Generic IO & Memory Access driver and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-782
- [Netskope Client Exposed IOCTL with Insufficient Access Controls](https://agentprime.io/advisories/CVE-2025-15641.md)
  `CVE-2025-15641` · CVE record: Netskope Netskope Client · CVSS 6.8 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: CWE-782
- [CVE-2026-8501](https://agentprime.io/advisories/CVE-2026-8501.md)
  `CVE-2026-8501` · CVE record: Symantec PC Tools Internet Security · CVSS 7.8 High · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-782
- [AsusPTPFilter: An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a…](https://agentprime.io/advisories/CVE-2026-6737.md)
  `CVE-2026-6737` · CVE record: ASUS AsusPTPFilter · CVSS 2.0 Low · Not analysed yet · Published 8 May 2026 · Tags: CWE-782
- [The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (ioctl 0x89F5) and read_mem (ioct…](https://agentprime.io/advisories/CVE-2026-36355.md)
  `CVE-2026-36355` · CVE record · CVSS 7.7 High · Not analysed yet · Published 5 May 2026 · Tags: Information disclosure, Memory corruption, CWE-782
- [Moxa MxGeneralIo: An exposed IOCTL with an insufficient access control vulnerability has been identified in…](https://agentprime.io/advisories/CVE-2026-4483.md)
  `CVE-2026-4483` · CVE record: Moxa MxGeneralIo · CVSS 7.0 High · Not analysed yet · Published 8 Apr 2026 · Tags: CWE-782
- [Intel(R) Ethernet Connection E825-C.: Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet…](https://agentprime.io/advisories/CVE-2025-27535.md)
  `CVE-2025-27535` · CVE record: Intel(R) Ethernet Connection E825-C. · CVSS 5.6 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-782
- [Fortinet FortiClientWindows: An Exposed IOCTL with Insufficient Access Control vulnerability \[CWE-782\] vulnerability…](https://agentprime.io/advisories/CVE-2025-47761.md)
  `CVE-2025-47761` · CVE record: Fortinet FortiClientWindows · CVSS 7.1 High · Not analysed yet · Published 18 Nov 2025 · Tags: CWE-782
- [A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated loc…](https://agentprime.io/advisories/CVE-2025-8061.md)
  `CVE-2025-8061` · CVE record: Lenovo Dispatcher 3.0 Driver and 1 more · CVSS 7.3 High · Not analysed yet · Published 11 Sept 2025 · Tags: CWE-782
- [Code Execution / Escalation of Privileges in ThrottleStop](https://agentprime.io/advisories/CVE-2025-7771.md)
  `CVE-2025-7771` · CVE record: TechPowerUp ThrottleStop · CVSS 8.7 High · Not analysed yet · Published 6 Aug 2025 · Tags: CWE-782
- [Hangzhou Shunwang Rentdrv2: Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR…](https://agentprime.io/advisories/CVE-2023-44976.md)
  `CVE-2023-44976` · CVE record: Hangzhou Shunwang Rentdrv2 · CVSS 3.2 Low · Not analysed yet · Published 1 Aug 2025 · Tags: CWE-782
- [An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.](https://agentprime.io/advisories/CVE-2025-26125.md)
  `CVE-2025-26125` · CVE record · CVSS 7.3 High · Not analysed yet · Published 17 Mar 2025 · Tags: CWE-782
- [NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the GPU vBIOS that may allow a malicious actor with tenant level GPU access to write to an unsupported registry causing a bad state.](https://agentprime.io/advisories/CVE-2024-0141.md)
  `CVE-2024-0141` · CVE record: NVIDIA NVIDIA Hopper HGX 8-GPU · CVSS 6.8 Medium · Not analysed yet · Published 5 Mar 2025 · Tags: CWE-782
- [An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, or escalate privilege…](https://agentprime.io/advisories/CVE-2024-39251.md)
  `CVE-2024-39251` · CVE record · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jul 2024 · Tags: CWE-782
- [Avaya IP Office Web Control RCE Vulnerability](https://agentprime.io/advisories/CVE-2024-4196.md)
  `CVE-2024-4196` · CVE record: Avaya IP Office · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Jun 2024 · Tags: CWE-782
- [An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.](https://agentprime.io/advisories/CVE-2024-33222.md)
  `CVE-2024-33222` · CVE record · CVSS 8.4 High · Not analysed yet · Published 22 May 2024 · Tags: CWE-782
- [An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.](https://agentprime.io/advisories/CVE-2024-33221.md)
  `CVE-2024-33221` · CVE record · CVSS 7.8 High · Not analysed yet · Published 22 May 2024 · Tags: CWE-782
- [An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.](https://agentprime.io/advisories/CVE-2024-33220.md)
  `CVE-2024-33220` · CVE record · CVSS 8.8 High · Not analysed yet · Published 22 May 2024 · Tags: CWE-782
- [An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.](https://agentprime.io/advisories/CVE-2024-33219.md)
  `CVE-2024-33219` · CVE record · CVSS 7.8 High · Not analysed yet · Published 22 May 2024 · Tags: CWE-782
- [An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL…](https://agentprime.io/advisories/CVE-2024-33218.md)
  `CVE-2024-33218` · CVE record · CVSS 7.8 High · Not analysed yet · Published 22 May 2024 · Tags: CWE-782
- [WinFlash Driver Permissions Issue](https://agentprime.io/advisories/CVE-2023-35841.md)
  `CVE-2023-35841` · CVE record: Phoenix WinFlash Driver · CVSS 7.8 High · Not analysed yet · Published 14 May 2024 · Tags: Broken access control, CWE-782
- [An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php com…](https://agentprime.io/advisories/CVE-2024-32370.md)
  `CVE-2024-32370` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2024 · Tags: CWE-782
- [An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests.](https://agentprime.io/advisories/CVE-2024-30804.md)
  `CVE-2024-30804` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Apr 2024 · Tags: CWE-782
- [IOBit: An information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit…](https://agentprime.io/advisories/CVE-2021-21785.md)
  `CVE-2021-21785` · CVE record: IOBit · CVSS 6.5 Medium · Not analysed yet · Published 5 Aug 2021 · Tags: CWE-782
- [IObit: An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare…](https://agentprime.io/advisories/CVE-2021-21792.md)
  `CVE-2021-21792` · CVE record: IObit · CVSS 6.5 Medium · Not analysed yet · Published 5 Aug 2021 · Tags: CWE-782
- [IOBit: An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare…](https://agentprime.io/advisories/CVE-2021-21791.md)
  `CVE-2021-21791` · CVE record: IOBit · CVSS 6.5 Medium · Not analysed yet · Published 5 Aug 2021 · Tags: CWE-782
- [IOBit: An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare…](https://agentprime.io/advisories/CVE-2021-21790.md)
  `CVE-2021-21790` · CVE record: IOBit · CVSS 6.5 Medium · Not analysed yet · Published 5 Aug 2021 · Tags: CWE-782
- [The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program ex…](https://agentprime.io/advisories/CVE-2021-25695.md)
  `CVE-2021-25695` · CVE record: \- PCoIP Agent for Windows · No CVSS score · Not analysed yet · Published 21 Jul 2021 · Tags: CWE-782
- [Iobit: A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit…](https://agentprime.io/advisories/CVE-2021-21786.md)
  `CVE-2021-21786` · CVE record: Iobit · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2021 · Tags: CWE-782
- [Iobit: A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate…](https://agentprime.io/advisories/CVE-2021-21789.md)
  `CVE-2021-21789` · CVE record: Iobit · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2021 · Tags: CWE-782
- [Iobit: A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate…](https://agentprime.io/advisories/CVE-2021-21788.md)
  `CVE-2021-21788` · CVE record: Iobit · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2021 · Tags: CWE-782
- [Iobit: A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate…](https://agentprime.io/advisories/CVE-2021-21787.md)
  `CVE-2021-21787` · CVE record: Iobit · CVSS 8.8 High · Not analysed yet · Published 7 Jul 2021 · Tags: CWE-782
- [Dell dbutil: Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which…](https://agentprime.io/advisories/CVE-2021-21551.md)
  `CVE-2021-21551` · CVE record: Dell dbutil · CVSS 8.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.80 · Not analysed yet · Published 4 May 2021 · Tags: CWE-782

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-782>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-782/>. Everything for agents: <https://agentprime.io/llms.txt>.