CWE-782: Exposed IOCTL with Insufficient Access Control
The product implements an IOCTL with functionality that should be restricted, but it does not properly enforce access control for the IOCTL.
A kind of CWE-749 Exposed Dangerous Method or Function.
From the CWE List. © The MITRE Corporation.
Newest
- asus system control interface An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local... 8.5 High
- alcpu core temp The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an... 8.4 High
- yungengxin cloud billing Yungengxin Cloud Billing IOCTL Process Termination LWBilling64.sys sub_14000443C exposed ioctl with insufficient access control 4.8 Medium
- qualitysoft corporation qnd advance, qnd premium, qnd standard +2 more QND contains an improper access control vulnerability in a named pipe, which may allow a local... 8.7 High
- asus armoury crate Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add... 2.0 Low
- asus armoury crate Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to... 5.9 Medium
- asus armoury crate Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to... 5.9 Medium
- passmark software burnintest, osforensics, performancetest +2 more PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sys 6.9 Medium
- passmark software burnintest, osforensics, performancetest +2 more PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL 8.5 High
- passmark software burnintest, osforensics, performancetest +2 more PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR Write IOCTL 6.9 Medium
- passmark software burnintest, osforensics, performancetest +2 more PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.sys IOCTL 6.9 Medium
- No product listed An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate... 7.8 High
- No product listed An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate... 7.8 High
- No product listed An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate... 7.8 High
- asus aura sync **UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA... 7.3 High
- gigabyte mbstorage GIGABYTE｜Gigabyte Control Center - Improper Access Control 8.5 High
- micro-star international (msi) kerncorelib64.sys MSI KernCoreLib64.sys Privilege Escalation via IOCTL Handlers 8.5 High
- nec corporation expressupdate agent for windows An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a... 8.5 High
- dynabook inc. generic io & memory access driver Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc.... 6.8 Medium
- netskope client Netskope Client Exposed IOCTL with Insufficient Access Controls 6.8 Medium
- symantec pc tools internet security CVE-2026-8501 7.8 High
- asus asusptpfilter An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a local... 2.0 Low
- No product listed The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through... 7.7 High
- moxa mxgeneralio An exposed IOCTL with an insufficient access control vulnerability has been identified in the... 7.0 High
- intel ethernet controller Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet... 5.6 Medium
- fortinet forticlient, forticlientwindows +1 more An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] in Fortinet... 7.1 High
- lenovo dispatcher 3.1 driver, dispatcher 3.0 driver +1 more A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0... 7.3 High
- techpowerup throttlestop Code Execution / Escalation of Privileges in ThrottleStop 8.7 High
- hangzhou shunwang rentdrv2 Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and... 3.2 Low
- No product listed An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers... 7.3 High
- nvidia hopper hgx 8-gpu NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the GPU vBIOS that may allow a malicious... 6.8 Medium
- thunderobot control center An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2... 10.0 Critical
- avaya ip office Avaya IP Office Web Control RCE Vulnerability 10.0 Critical
- asus atszio driver An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows... 8.4 High
- asus bios flash driver An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0... 7.8 High
- asus aisuite3, ai suite +1 more An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows... 8.8 High
- asus sabertooth x99 driver, sabertooth x99 firmware +1 more An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0... 7.8 High
- asus usb3.0 boost storage driver An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver... 7.8 High
- phoenix winflash driver, phoenixtech winflash +1 more WinFlash Driver Permissions Issue 7.8 High
- hsc mailinspector An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker... 9.8 Critical
- asus fan xpert An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an... 9.8 Critical
- iobit advanced systemcare ultimate An information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit Advanced... 6.5 Medium
- iobit advanced systemcare ultimate An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate... 6.5 Medium
- iobit advanced systemcare ultimate An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate... 6.5 Medium
- iobit advanced systemcare ultimate An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate... 6.5 Medium
- teradici pcoip The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands... 7.8 High
- iobit advanced systemcare ultimate A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced... 8.8 High
- iobit advanced systemcare ultimate A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0... 8.8 High
- iobit advanced systemcare ultimate A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0... 8.8 High
- iobit advanced systemcare ultimate A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0... 8.8 High
- Show olderLoading…