CVE-2024-26507

June 10, 2024, 6:06 p.m.

Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

FinalWire AIRDA Extreme

  • 7.00.6700
  • before 7.00.6700

AIDA64 Engineer

  • 7.00.6700
  • before 7.00.6700

AIDA64 Business

  • 7.00.6700
  • before 7.00.6700

AIDA64 Network Audit

  • 7.00.6700
  • before 7.00.6700

Source

cve@mitre.org

Tags

CVE-2024-26507 details

Published : June 10, 2024, 4:15 p.m.
Last Modified : June 10, 2024, 6:06 p.m.

Description

An issue in FinalWire AIRDA Extreme, AIDA64 Engineer, AIDA64 Business, AIDA64 Network Audit v.7.00.6700 and before allows a local attacker to escalate privileges via the DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages components.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description
This website uses the NVD API, but is not approved or certified by it.