CWE-782 · Access Control
Exposed IOCTL with Insufficient Access Control
51CVEs
SortMost likely exploited
51 CVEs with CWE-782 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-21551In CISA KEVExploitedDell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local au…Dell · dbutil · CVSS 8.8 · 2021-05-04 | 8.8 | 80% | 2021-05-04 |
| CVE-2025-7771Code Execution / Escalation of Privileges in ThrottleStopTechPowerUp · ThrottleStop · CVSS 8.7 · 2025-08-06 | 8.7 | 6.8% | 2025-08-06 |
| CVE-2024-32370An issue in HSC Cybersecurity HC Mailinspector 5.2.17-3 through 5.2.18 allows a remote attacker to obtain sensitive information via a crafted payload to the id parameter in the ml…Hsclabs · Mailinspector · CVSS 9.8 · 2024-05-07 | 9.8 | 1.0% | 2024-05-07 |
| CVE-2024-30804An issue discovered in the DeviceIoControl component in ASUS Fan_Xpert before v.10013 allows an attacker to execute arbitrary code via crafted IOCTL requests.No vendor recorded · CVSS 9.8 · 2024-04-26 | 9.8 | 0.8% | 2024-04-26 |
| CVE-2024-39251An issue in the component ControlCenter.sys/ControlCenter64.sys of ThundeRobot Control Center v2.0.0.10 allows attackers to access sensitive information, execute arbitrary code, o…No vendor recorded · CVSS 10 · 2024-07-01 | 10.0 | 0.7% | 2024-07-01 |
| CVE-2024-33220An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOC…Asus · Ai Suite · CVSS 8.8 · 2024-05-22 | 8.8 | 0.7% | 2024-05-22 |
| CVE-2026-36355The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (ioctl 0x89F5…No vendor recorded · CVSS 7.7 · 2026-05-05 | 7.7 | 0.7% | 2026-05-05 |
| CVE-2026-84408QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is ins…QualitySoft Corporation · QND Premium · CVSS 8.7 · 2026-09-16 | 8.7 | 0.6% | 2026-09-16 |
| CVE-2024-4196Avaya IP Office Web Control RCE VulnerabilityAvaya · IP Office · CVSS 10 · 2024-06-25 | 10.0 | 0.6% | 2024-06-25 |
| CVE-2024-0141NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the GPU vBIOS that may allow a malicious actor with tenant level GPU access to write to an unsupported registry causing a b…NVIDIA · NVIDIA Hopper HGX 8-GPU · CVSS 6.8 · 2025-03-05 | 6.8 | 0.5% | 2025-03-05 |
| CVE-2025-26125An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.No vendor recorded · CVSS 7.3 · 2025-03-17 | 7.3 | 0.5% | 2025-03-17 |
| CVE-2025-8061A potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some Lenovo consumer notebooks that could allow…Lenovo · Dispatcher 3.0 Driver · CVSS 7 · 2025-09-11 | 7.0 | 0.4% | 2025-09-11 |
| CVE-2021-21792An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O re…Iobit · IObit · CVSS 6.5 · 2021-08-05 | 6.5 | 0.3% | 2021-08-05 |
| CVE-2021-21787A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests. During IOCTL 0x9c40a0d8, the fir…Iobit · Iobit · CVSS 8.8 · 2021-07-07 | 8.8 | 0.3% | 2021-07-07 |
| CVE-2021-21791An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O re…Iobit · IOBit · CVSS 6.5 · 2021-08-05 | 6.5 | 0.3% | 2021-08-05 |
| CVE-2021-21790An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O re…Iobit · IOBit · CVSS 6.5 · 2021-08-05 | 6.5 | 0.3% | 2021-08-05 |
| CVE-2021-21785An information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O request packet (IRP) can…Iobit · IOBit · CVSS 6.5 · 2021-08-05 | 6.5 | 0.3% | 2021-08-05 |
| CVE-2021-21789A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests. During IOCTL 0x9c40a0e0, the fir…Iobit · Iobit · CVSS 8.8 · 2021-07-07 | 8.8 | 0.3% | 2021-07-07 |
| CVE-2021-21788A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests. During IOCTL 0x9c40a0dc, the fir…Iobit · Iobit · CVSS 8.8 · 2021-07-07 | 8.8 | 0.3% | 2021-07-07 |
| CVE-2026-4483An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers. The affected utility, MxGe…Moxa · MxGeneralIo · CVSS 7 · 2026-04-08 | 7.0 | 0.3% | 2026-04-08 |
| CVE-2023-44976Hangzhou Shunwang Rentdrv2 before 2024-12-24 allows local users to terminate EDR processes and possibly have unspecified other impact via DeviceIoControl with control code 0x22E01…Hangzhou Shunwang · Rentdrv2 · CVSS 3.2 · 2025-08-01 | 3.2 | 0.3% | 2025-08-01 |
| CVE-2021-21786A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O request packet (IRP) can lea…Iobit · Iobit · CVSS 8.8 · 2021-07-07 | 8.8 | 0.3% | 2021-07-07 |
| CVE-2021-25695The USB vHub in the Teradici PCOIP Software Agent prior to version 21.07.0 would accept commands from any program, which may allow an attacker to elevate privileges by changing th…Teradici · - PCoIP Agent for Windows · 2021-07-21 | – | 0.3% | 2021-07-21 |
| CVE-2024-33219An issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending cra…Asus · Sabertooth X99 Firmware · CVSS 7.8 · 2024-05-22 | 7.8 | 0.3% | 2024-05-22 |
| CVE-2024-33218An issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privileges and execute arbitrary code via s…No vendor recorded · CVSS 7.8 · 2024-05-22 | 7.8 | 0.2% | 2024-05-22 |
| CVE-2024-33222An issue in the component ATSZIO64.sys of ASUSTeK Computer Inc ASUS ATSZIO Driver v0.2.1.7 allows attackers to escalate privileges and execute arbitrary code via sending crafted I…No vendor recorded · CVSS 8.4 · 2024-05-22 | 8.4 | 0.2% | 2024-05-22 |
| CVE-2024-33221An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending cra…No vendor recorded · CVSS 7.8 · 2024-05-22 | 7.8 | 0.2% | 2024-05-22 |
| CVE-2025-47761An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9…Fortinet · FortiClientWindows · CVSS 7.1 · 2025-11-18 | 7.1 | 0.2% | 2025-11-18 |
| CVE-2026-80116PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTLPassMark Software · PerformanceTest · CVSS 7.8 · 2026-09-04 | 7.8 | 0.2% | 2026-09-04 |
| CVE-2026-57851MSI KernCoreLib64.sys Privilege Escalation via IOCTL HandlersMicro-Star International (MSI) · KernCoreLib64.sys · CVSS 7.8 · 2026-07-07 | 7.8 | 0.2% | 2026-07-07 |
| CVE-2026-56129Generic IO & Memory Access driver for PCs provided by TOSHIBA CORPORATION and Dynabook Inc. exposes its IOCTL with insufficient access control. A logged-in user with no administra…Dynabook Inc. · Generic IO & Memory Access driver · CVSS 5.5 · 2026-06-25 | 5.5 | 0.2% | 2026-06-25 |
| CVE-2026-80117PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sysPassMark Software · PerformanceTest · CVSS 7.1 · 2026-09-04 | 7.1 | 0.2% | 2026-09-04 |
| CVE-2026-80113PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.sys IOCTLPassMark Software · PerformanceTest · CVSS 7.1 · 2026-09-04 | 7.1 | 0.2% | 2026-09-04 |
| CVE-2025-15641Netskope Client Exposed IOCTL with Insufficient Access ControlsNetskope · Netskope Client · CVSS 6.8 · 2026-06-17 | 6.8 | 0.2% | 2026-06-17 |
| CVE-2026-8501CVE-2026-8501Symantec · PC Tools Internet Security · CVSS 7.8 · 2026-06-01 | 7.8 | 0.2% | 2026-06-01 |
| CVE-2026-9492GIGABYTE｜Gigabyte Control Center - Improper Access ControlGIGABYTE · MBStorage · CVSS 7.8 · 2026-07-13 | 7.8 | 0.2% | 2026-07-13 |
| CVE-2026-80115PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR Write IOCTLPassMark Software · PerformanceTest · CVSS 6.1 · 2026-09-04 | 6.1 | 0.2% | 2026-09-04 |
| CVE-2026-8797An access control deficiency vulnerability exists in ExpressUpdate Agent for Windows. If a malicious user gains access to the product, arbitrary code could be executed with SYSTEM…NEC Corporation · ExpressUpdate Agent for Windows · CVSS 8.5 · 2026-06-26 | 8.5 | 0.1% | 2026-06-26 |
| CVE-2026-38764An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sysNo vendor recorded · CVSS 7.8 · 2026-07-23 | 7.8 | 0.1% | 2026-07-23 |
| CVE-2026-75809Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentic…ASUS · Armoury Crate · CVSS 5.9 · 2026-09-08 | 5.9 | 0.1% | 2026-09-08 |
| CVE-2026-18769Insufficient IOCTL access control allows local relocation of arbitrary physical memoryBeckhoff Automation · TcRouter.sys for Windows on x64 3.1.0.2364 · CVSS 7.8 · 2026-11-11 | 7.8 | 0.1% | 2026-11-11 |
| CVE-2026-18768Insufficient IOCTL access control allows local access to arbitrary physical memoryBeckhoff Automation · TcRouter.sys for Windows on x64 3.1.0.2364 · CVSS 7.8 · 2026-11-11 | 7.8 | 0.1% | 2026-11-11 |
| CVE-2026-18767Insufficient IOCTL access control allows local access to I/O portsBeckhoff Automation · TcRouter.sys for Windows on x64 3.1.0.2364 · CVSS 7.8 · 2026-11-11 | 7.8 | 0.1% | 2026-11-11 |
| CVE-2026-16004Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by b…ASUS · Armoury Crate · CVSS 5.9 · 2026-09-08 | 5.9 | 0.1% | 2026-09-08 |
| CVE-2026-16003Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL req…ASUS · Armoury Crate · CVSS 2 · 2026-09-08 | 2.0 | 0.1% | 2026-09-08 |
| CVE-2026-109836The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written.ALCPU · Core Temp · CVSS 8.4 · 2026-11-03 | 8.4 | 0.1% | 2026-11-03 |
| CVE-2019-25764**UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitr…ASUS · AURA SYNC · CVSS 7.3 · 2026-07-17 | 7.3 | 0.1% | 2026-07-17 |
| CVE-2026-108889Yungengxin Cloud Billing IOCTL Process Termination LWBilling64.sys sub_14000443C exposed ioctl with insufficient access controlYungengxin · Cloud Billing · CVSS 4.4 · 2026-10-12 | 4.4 | 0.1% | 2026-10-12 |
| CVE-2025-27535Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet Connection E825-C. before version NVM ver. 3.84 within Ring 0: Bare Metal OS may allow a…Intel · Intel(R) Ethernet Connection E825-C. · CVSS 5.3 · 2026-02-10 | 5.3 | 0.1% | 2026-02-10 |
| CVE-2026-112116An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted…ASUS · System Control Interface · CVSS 8.5 · 2026-11-04 | 8.5 | 0.1% | 2026-11-04 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.