СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2025-47761 An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet Fortinet / FortiClientWindows | Высокий | 7.1 | 0,17 % | 18.11.2025 | ||
| CVE-2026-6737 An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a local user ASUS / AsusPTPFilter | Низкий | 2.0 | 0,09 % | 08.05.2026 | ||
| CVE-2026-108889 Yungengxin Cloud Billing IOCTL Process Termination LWBilling64.sys sub_14000443C exposed ioctl with insufficient access control Yungengxin / Cloud Billing | Средний | 4.8 | 0,12 % | 12.10.2026 | ||
| CVE-2026-80117 PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sys PassMark Software / PerformanceTest · PassMark Software / BurnInTest | Средний | 6.9 | 0,16 % | Патч | 04.09.2026 | |
| CVE-2026-80116 PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL PassMark Software / PerformanceTest · PassMark Software / BurnInTest | Критический | 8.5 | 0,17 % | PoCПатч | 04.09.2026 | |
| CVE-2026-80115 PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR Write IOCTL PassMark Software / PerformanceTest · PassMark Software / BurnInTest | Высокий | 6.9 | 0,15 % | PoCПатч | 04.09.2026 | |
| CVE-2026-80113 PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.sys IOCTL PassMark Software / PerformanceTest · PassMark Software / BurnInTest | Высокий | 6.9 | 0,16 % | PoCПатч | 04.09.2026 | |
| CVE-2026-57851 MSI KernCoreLib64.sys Privilege Escalation via IOCTL Handlers Micro-Star International (MSI) / KernCoreLib64.sys | Критический | 8.5 | 0,17 % | PoC | 07.07.2026 | |
| CVE-2026-75809 Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosu ASUS / Armoury Crate | Средний | 5.9 | 0,15 % | 08.09.2026 | ||
| CVE-2026-16004 Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read a ASUS / Armoury Crate | Средний | 5.9 | 0,12 % | 08.09.2026 | ||
| CVE-2026-16003 Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an ASUS / Armoury Crate | Низкий | 2.0 | 0,12 % | 08.09.2026 | ||
| CVE-2026-84408 QND contains an improper access control vulnerability in a named pipe, which may allow a local attac QualitySoft Corporation / QND Premium · QualitySoft Corporation / QND Standard | Высокий | 8.7 | 0,63 % | 16.09.2026 | ||
| CVE-2026-38766 An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate priv n/a / n/a | Критический | 7.8 | 0,14 % | PoC | 22.07.2026 | |
| CVE-2026-38765 An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate priv n/a / n/a | Критический | 7.8 | 0,14 % | PoC | 22.07.2026 | |
| CVE-2026-38764 An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate priv n/a / n/a | Критический | 7.8 | 0,15 % | PoC | 23.07.2026 | |
| CVE-2026-9492 GIGABYTE｜Gigabyte Control Center - Improper Access Control GIGABYTE / MBStorage | Высокий | 8.5 | 0,16 % | 13.07.2026 | ||
| CVE-2026-36355 The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4 n/a / n/a | Критический | 7.7 | 0,67 % | PoC | 05.05.2026 | |
| CVE-2026-8797 An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious NEC Corporation / ExpressUpdate Agent for Windows | Высокий | 8.5 | 0,15 % | 26.06.2026 | ||
| CVE-2026-56129 Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes Dynabook Inc. / Generic IO & Memory Access driver · TOSHIBA CORPORATION / Generic IO & Memory Access driver | Средний | 6.8 | 0,17 % | 25.06.2026 | ||
| CVE-2025-15641 Netskope Client Exposed IOCTL with Insufficient Access Controls Netskope / Netskope Client | Средний | 6.8 | 0,16 % | 17.06.2026 | ||
| CVE-2026-8501 CVE-2026-8501 Symantec / PC Tools Internet Security | Высокий | 7.8 | 0,16 % | 01.06.2026 | ||
| CVE-2026-4483 An exposed IOCTL with an insufficient access control vulnerability has been identified in the utili Moxa / MxGeneralIo | Высокий | 7.0 | 0,3 % | 08.04.2026 | ||
| CVE-2025-27535 Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet Connection n/a / Intel(R) Ethernet Connection E825-C. | Средний | 5.6 | 0,12 % | 10.02.2026 | ||
| CVE-2024-4196 Avaya IP Office Web Control RCE Vulnerability Avaya / IP Office · avaya / ip_office | Критический | 10.0 | 0,59 % | 25.06.2024 | ||
| CVE-2025-8061 A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Lenovo / Dispatcher 3.0 Driver · Lenovo / Dispatcher 3.1 Driver | Высокий | 7.3 | 0,43 % | 11.09.2025 | ||
| CVE-2025-7771 Code Execution / Escalation of Privileges in ThrottleStop TechPowerUp / ThrottleStop | Высокий | 8.7 | 8,31 % | 06.08.2025 | ||
| CVE-2025-26125 An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to a n/a / n/a | Высокий | 7.3 | 0,52 % | 17.03.2025 | ||
| CVE-2024-30804 An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an atta n/a / n/a · asus / fan_xpert | Критический | 9.8 | 0,82 % | 26.04.2024 | ||
| CVE-2024-33222 An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows at n/a / n/a · asus / atszio_driver | Высокий | 8.4 | 0,19 % | 22.05.2024 | ||
| CVE-2024-39251 An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0 n/a / n/a · thunderobot / control_center | Критический | 10.0 | 0,72 % | 01.07.2024 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.