Description
Wellbia-s XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7.78, privilege escalation vulnerability provides access to the IRP_MJ_WRITE command interface, which allows any user process to request a PROCESS_ALL_ACCESS. Note: KVE 2023-5589 (https://krcert.or.kr) was initially issued for version 10.0.10011.16384, but the vulnerability was not fully remediated and remains in version 2023.12.7.78.
CVSS 7.8EPSS 0.19499999999999998%Risk 0.79
View source- Published
- 2026-05-11 18:16:33
- Affected versions
- unknown
- Type
- Firmware
- Last modified
- 2026-08-05 16:16:56
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H