Critical Alert 6 Active Exploits Detected Today

CVE-2021-23758 Ajax.NET Professional Deserialization of Untrusted Data Vulnerability →
CVE-2015-3246 Red Hat Libuser Race Condition Vulnerability →
CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability →
CVE-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability →
CVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability →
CVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability →
Powered by CVE Watchtower
×
August 27, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-1055NVD

Vulnerability Summary

A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to terminate a wide range of processes running with administrative or system-level privileges, with the exception of those inherently protected by the operating system. This flaw stems from missing access control in the driver's IOCTL handler, enabling unprivileged users to perform privileged actions in kernel space. Successful exploitation can lead to denial of service by disrupting critical services or privileged applications.
Severity Level
MEDIUM(5.6)
Published Date
Jun 11, 2025
Last Modified
Jun 12, 2025
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVSS v3.1 Base Metrics
Attack VectorLocal
Attack ComplexityHigh
Privileges RequiredLow
User InteractionNone
ScopeChanged
ConfidentialityNone
IntegrityNone
AvailabilityHigh