Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7mf9-x65f-jwgf

Опубликовано: 03 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Paragon Partition Manager version 17, both community and Business versions, contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

Paragon Partition Manager version 17, both community and Business versions, contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

EPSS

Процентиль: 26%
0.00329
Низкий

7.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.8
nvd
больше 1 года назад

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

CVSS3: 7.8
fstec
больше 1 года назад

Уязвимость драйвера BioNTdrv.sys программного обеспечения для работы с разделами жестких дисков Paragon Partition Manager, позволяющая нарушителю повысить свои привилегии до уровня system

EPSS

Процентиль: 26%
0.00329
Низкий

7.8 High

CVSS3

Дефекты

CWE-20