CVE-2020-12122

Katalog CVE

CVSS 7.8 · High EPSS 0,47%

Kerentanan Improper Input Validation pada maxpcsecure max spyware detector. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In Max Secure Max Spyware Detector 1.0.0.044, the driver file (MaxProc64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x2200019. (This also extends to the various other products from Max Secure that include MaxProc64.sys.)

Rincian

Terbit di NVD

5 Februari 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 38,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/FULLSHADE/Kernel-exploits/tree/master/MaxProc64.sys exploit · advisory pihak ketiga
• https://github.com/FULLSHADE/Kernel-exploits product
• https://www.maxpcsecure.com/spywaredetector.htm product