Yarden Shafir

The issue allows attackers to obtain sensitive information and affect the system. It is related to a memory information disclosure in the Windows kernel.

The issue is related to insufficient protection of registration data in the Windows kernel, which can be exploited to disclose protected information. This allows attackers to obtain sensitive information and potentially affect the system.

The issue is related to insufficient protection of registration data in the Windows kernel, which can be exploited to disclose protected information. This can allow an attacker to obtain sensitive information and affect the system.

The issue allows attackers to obtain sensitive information and affect the system. It is related to a memory information disclosure in the Windows kernel.

The issue allows attackers to obtain sensitive information and affect the system. It is related to a memory information disclosure in the Windows kernel.

A vulnerability allows attackers to obtain sensitive information and affect the system. This issue is related to the disclosure of memory information in the Windows kernel.

The Dell `dbutil 2 3.sys` driver contains an insufficient access control vulnerability. This issue allows a local authenticated user to escalate privileges, cause a denial of service, or disclose protected information. In real-world incidents, the Lazarus group exploited this flaw using a Bring Your Own Vulnerable Driver (BYOVD) technique—where a legitimate but vulnerable driver is installed on the target system—to deploy the FudModule rootkit. This allowed the attackers to read and write kernel memory, effectively disabling multiple Windows security monitoring mechanisms to execute commands with kernel-level privileges. The campaign targeted individuals in the aerospace industry in the Netherlands and political journalists in Belgium via phishing emails disguised as job offers from Amazon.