CWE-782 · 44 records
Exposed IOCTL with Insufficient Access Control
CVEs in this class
44 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
85Now | CVE-2021-21551Weaponized | Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of servidell · dbutil · CWE-782 | High7.8 | KEV | 79.6% | May 4, 2021 |
40Plan | CVE-2024-39251No exploit | An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitiveCWE-782 | Critical10.0 | — | 0.7% | Jul 1, 2024 |
39Monitor | CVE-2024-32370Proof of concept | An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a craftehsclabs · mailinspector · CWE-782 | Critical9.8 | — | 1.0% | May 7, 2024 |
39Monitor | CVE-2024-30804Proof of concept | An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via craftCWE-782 | Critical9.8 | — | 0.8% | Apr 26, 2024 |
39Monitor | CVE-2024-4196No exploit | Avaya IP Office Web Control RCE Vulnerabilityavaya · ip office · CWE-782 | Critical9.8 | — | 0.5% | Jun 25, 2024 |
36Monitor | CVE-2025-7771Proof of concept | Code Execution / Escalation of Privileges in ThrottleStoptechpowerup · throttlestop · CWE-782 | High8.7 | — | 8.1% | Aug 6, 2025 |
35Monitor | CVE-2024-33220No exploit | An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and executeasus · ai suite · CWE-782 | High8.8 | — | 0.7% | May 22, 2024 |
35Monitor | CVE-2021-21787No exploit | A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write reqiobit · advanced systemcare ultimate · CWE-782 | High8.8 | — | 0.3% | Jul 7, 2021 |
35Monitor | CVE-2021-21788No exploit | A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write reqiobit · advanced systemcare ultimate · CWE-782 | High8.8 | — | 0.3% | Jul 7, 2021 |
35Monitor | CVE-2021-21789No exploit | A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write reqiobit · advanced systemcare ultimate · CWE-782 | High8.8 | — | 0.3% | Jul 7, 2021 |
34Monitor | CVE-2026-84408No exploit | QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC whequalitysoft corporation · qnd premium · CWE-782 | High8.7 | — | 0.6% | Sep 16, 2026 |
34Monitor | CVE-2026-80116No exploit | PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTLpassmark software · performancetest · CWE-782 | High8.5 | — | 0.1% | Sep 4, 2026 |
34Monitor | CVE-2026-57851Proof of concept | MSI KernCoreLib64.sys Privilege Escalation via IOCTL Handlersmicro-star international (msi) · kerncorelib64.sys · CWE-782 | High8.5 | — | 0.1% | Jul 7, 2026 |
34Monitor | CVE-2026-9492No exploit | GIGABYTE｜Gigabyte Control Center - Improper Access Controlgigabyte · mbstorage · CWE-782 | High8.5 | — | 0.1% | Jul 13, 2026 |
34Monitor | CVE-2026-8797No exploit | An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows.nec corporation · expressupdate agent for windows · CWE-782 | High8.5 | — | 0.1% | Jun 26, 2026 |
33Monitor | CVE-2024-33222No exploit | An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate privileges and execuCWE-782 | High8.4 | — | 0.1% | May 22, 2024 |
31Monitor | CVE-2021-21786No exploit | A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220.iobit · advanced systemcare ultimate · CWE-782 | High7.8 | — | 0.2% | Jul 7, 2021 |
31Monitor | CVE-2021-25695No exploit | The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attackteradici · pcoip · CWE-782 | High7.8 | — | 0.2% | Jul 21, 2021 |
31Monitor | CVE-2024-33219No exploit | An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges andasus · sabertooth x99 firmware · CWE-782 | High7.8 | — | 0.2% | May 22, 2024 |
31Monitor | CVE-2024-33218No exploit | An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privCWE-782 | High7.8 | — | 0.2% | May 22, 2024 |
31Monitor | CVE-2024-33221No exploit | An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges andCWE-782 | High7.8 | — | 0.1% | May 22, 2024 |
31Monitor | CVE-2025-47761No exploit | An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, fortinet · forticlient · CWE-782 | High7.8 | — | 0.1% | Nov 18, 2025 |
31Monitor | CVE-2026-8501No exploit | Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the symantec · pc tools internet security · CWE-782 | High7.8 | — | 0.1% | Jun 1, 2026 |
29Monitor | CVE-2025-26125Proof of concept | An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate priCWE-782 | High7.3 | — | 0.5% | Mar 17, 2025 |
29Monitor | CVE-2025-8061Proof of concept | A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenolenovo · dispatcher 3.0 driver · CWE-782 | High7.3 | — | 0.4% | Sep 11, 2025 |
- CVE-2021-2155185Now
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of servi
HighCVSS 7.8KEVWeaponizedEPSS 79%dell · dbutilMay 4, 2021
- CVE-2024-3925140Plan
An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive
CriticalCVSS 10.0No exploitEPSS 0%Jul 1, 2024
- CVE-2024-3237039Monitor
An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafte
CriticalCVSS 9.8Proof of conceptEPSS 1%hsclabs · mailinspectorMay 7, 2024
- CVE-2024-3080439Monitor
An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via craft
CriticalCVSS 9.8Proof of conceptEPSS 0%Apr 26, 2024
- CVE-2024-419639Monitor
Avaya IP Office Web Control RCE Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%avaya · ip officeJun 25, 2024
- CVE-2025-777136Monitor
Code Execution / Escalation of Privileges in ThrottleStop
HighCVSS 8.7Proof of conceptEPSS 8%techpowerup · throttlestopAug 6, 2025
- CVE-2024-3322035Monitor
An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute
HighCVSS 8.8No exploitEPSS 0%asus · ai suiteMay 22, 2024
- CVE-2021-2178735Monitor
A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write req
HighCVSS 8.8No exploitEPSS 0%iobit · advanced systemcare ultimateJul 7, 2021
- CVE-2021-2178835Monitor
A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write req
HighCVSS 8.8No exploitEPSS 0%iobit · advanced systemcare ultimateJul 7, 2021
- CVE-2021-2178935Monitor
A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write req
HighCVSS 8.8No exploitEPSS 0%iobit · advanced systemcare ultimateJul 7, 2021
- CVE-2026-8440834Monitor
QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC whe
HighCVSS 8.7No exploitEPSS 0%qualitysoft corporation · qnd premiumSep 16, 2026
- CVE-2026-8011634Monitor
PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL
HighCVSS 8.5No exploitEPSS 0%passmark software · performancetestSep 4, 2026
- CVE-2026-5785134Monitor
MSI KernCoreLib64.sys Privilege Escalation via IOCTL Handlers
HighCVSS 8.5Proof of conceptEPSS 0%micro-star international (msi) · kerncorelib64.sysJul 7, 2026
- CVE-2026-949234Monitor
GIGABYTE｜Gigabyte Control Center - Improper Access Control
HighCVSS 8.5No exploitEPSS 0%gigabyte · mbstorageJul 13, 2026
- CVE-2026-879734Monitor
An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows.
HighCVSS 8.5No exploitEPSS 0%nec corporation · expressupdate agent for windowsJun 26, 2026
- CVE-2024-3322233Monitor
An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate privileges and execu
HighCVSS 8.4No exploitEPSS 0%May 22, 2024
- CVE-2021-2178631Monitor
A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220.
HighCVSS 7.8No exploitEPSS 0%iobit · advanced systemcare ultimateJul 7, 2021
- CVE-2021-2569531Monitor
The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attack
HighCVSS 7.8No exploitEPSS 0%teradici · pcoipJul 21, 2021
- CVE-2024-3321931Monitor
An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and
HighCVSS 7.8No exploitEPSS 0%asus · sabertooth x99 firmwareMay 22, 2024
- CVE-2024-3321831Monitor
An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate priv
HighCVSS 7.8No exploitEPSS 0%May 22, 2024
- CVE-2024-3322131Monitor
An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and
HighCVSS 7.8No exploitEPSS 0%May 22, 2024
- CVE-2025-4776131Monitor
An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3,
HighCVSS 7.8No exploitEPSS 0%fortinet · forticlientNov 18, 2025
- CVE-2026-850131Monitor
Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the
HighCVSS 7.8No exploitEPSS 0%symantec · pc tools internet securityJun 1, 2026
- CVE-2025-2612529Monitor
An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate pri
HighCVSS 7.3Proof of conceptEPSS 0%Mar 17, 2025
- CVE-2025-806129Monitor
A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Leno
HighCVSS 7.3Proof of conceptEPSS 0%lenovo · dispatcher 3.0 driverSep 11, 2025