← Späť na vyhľadávanie CVE

CVE-2026-3609

XIGNCODE3

Popis

Wellbia-s XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7.78, privilege escalation vulnerability provides access to the IRP_MJ_WRITE command interface, which allows any user process to request a PROCESS_ALL_ACCESS. Note: KVE 2023-5589 (https://krcert.or.kr) was initially issued for version 10.0.10011.16384, but the vulnerability was not fully remediated and remains in version 2023.12.7.78.

CVSS 7.8EPSS 0.19499999999999998%Riziko 0.79
Zobraziť zdroj
Zverejnené
2026-05-11 18:16:33
Dotknuté verzie
unknown
Typ
Firmvér
Posledná úprava
2026-08-05 16:16:56
Vektor
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H