CWE-782.

ASUS System Control Interface: An exposed IOCTL with insufficient access control in ASUS System Control Interface allows…

• ASUS System Control Interface
• CWE-782

ALCPU Core Temp: The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access…

• ALCPU Core Temp
• CWE-782

Yungengxin Cloud Billing IOCTL Process Termination LWBilling64.sys sub_14000443C exposed ioctl with insufficient access control

• Yungengxin Cloud Billing
• CWE-782

QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute ar…

• QualitySoft Corporation QND Premium
• QualitySoft Corporation QND Standard
• CWE-782

ASUS Armoury Crate: Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local…

• ASUS Armoury Crate
• CWE-782

ASUS Armoury Crate: Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local…

• ASUS Armoury Crate
• CWE-782

ASUS Armoury Crate: Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user…

• ASUS Armoury Crate
• CWE-782

PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sys

• PassMark Software PerformanceTest
• PassMark Software BurnInTest
• CWE-782

PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL

• PassMark Software PerformanceTest
• PassMark Software BurnInTest
• CWE-782

PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR Write IOCTL

• PassMark Software PerformanceTest
• PassMark Software BurnInTest
• CWE-782

PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.sys IOCTL

• PassMark Software PerformanceTest
• PassMark Software BurnInTest
• Memory corruption
• CWE-782

An issue in Unistal Systems Pvt.

• Privilege escalation
• CWE-782

An issue in Unistal Systems Pvt.

• Privilege escalation
• CWE-782

An issue in Unistal Systems Pvt.

• Privilege escalation
• CWE-782

ASUS AURA SYNC: **UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS…

• ASUS AURA SYNC
• CWE-782

GIGABYTE｜Gigabyte Control Center - Improper Access Control

• GIGABYTE MBStorage
• CWE-782

MSI KernCoreLib64.sys Privilege Escalation via IOCTL Handlers

• Micro-Star International (MSI) KernCoreLib64.sys
• CWE-782

An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows.

• NEC Corporation ExpressUpdate Agent for Windows
• CWE-782

Dynabook Inc. Generic IO & Memory Access driver: Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook…

• Dynabook Inc. Generic IO & Memory Access driver
• TOSHIBA CORPORATION Generic IO & Memory Access driver
• CWE-782

Netskope Client Exposed IOCTL with Insufficient Access Controls

• Netskope Client
• CWE-782

CVE-2026-8501

• Symantec PC Tools Internet Security
• CWE-782

AsusPTPFilter: An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a…

• AsusPTPFilter
• CWE-782

The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (ioctl 0x89F5) and read_mem (ioct…

• Information disclosure
• Memory corruption

Moxa MxGeneralIo: An exposed IOCTL with an insufficient access control vulnerability has been identified in…

• Moxa MxGeneralIo
• CWE-782

Intel(R) Ethernet Connection E825-C.: Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet…

• Intel(R) Ethernet Connection E825-C.
• CWE-782

Fortinet FortiClientWindows: An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability…

• Fortinet FortiClientWindows
• CWE-782

A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow an authenticated loc…

• Lenovo Dispatcher 3.0 Driver
• Lenovo Dispatcher 3.1 Driver
• CWE-782

Code Execution / Escalation of Privileges in ThrottleStop

• TechPowerUp ThrottleStop
• CWE-782

Hangzhou Shunwang Rentdrv2: Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR…

• Hangzhou Shunwang Rentdrv2
• CWE-782

An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.

• CWE-782

NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the GPU vBIOS that may allow a malicious actor with tenant level GPU access to write to an unsupported registry causing a bad state.

• NVIDIA Hopper HGX 8-GPU
• CWE-782

An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, or escalate privilege…

• CWE-782

Avaya IP Office Web Control RCE Vulnerability

• Avaya IP Office
• CWE-782

An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

• CWE-782

An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

• CWE-782

An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

• CWE-782

An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

• CWE-782

An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL…

• CWE-782

WinFlash Driver Permissions Issue

• Phoenix WinFlash Driver
• Broken access control
• CWE-782

An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the mliSystemUsers.php com…

• CWE-782

An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests.

• CWE-782

IOBit: An information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit…

• IOBit
• CWE-782

IObit: An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare…

• IObit
• CWE-782

IOBit: An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare…

• IOBit
• CWE-782

IOBit: An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare…

• IOBit
• CWE-782

The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing the flow of program ex…

• - PCoIP Agent for Windows
• CWE-782

Iobit: A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit…

• Iobit
• CWE-782

Iobit: A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate…

• Iobit
• CWE-782

Iobit: A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate…

• Iobit
• CWE-782

Iobit: A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate…

• Iobit
• CWE-782

Dell dbutil: Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which…

• Dell dbutil
• CWE-782