Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7mf9-x65f-jwgf

Опубликовано: 03 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Paragon Partition Manager version 17, both community and Business versions, contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

Paragon Partition Manager version 17, both community and Business versions, contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

EPSS

Процентиль: 10%
0.00035
Низкий

7.8 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.8
nvd
11 месяцев назад

Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.

CVSS3: 7.8
fstec
11 месяцев назад

Уязвимость драйвера BioNTdrv.sys программного обеспечения для работы с разделами жестких дисков Paragon Partition Manager, позволяющая нарушителю повысить свои привилегии до уровня system

EPSS

Процентиль: 10%
0.00035
Низкий

7.8 High

CVSS3

Дефекты

CWE-20