Vulnerability Description
The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Msi | Dragon Center | < 2.0.98.0 |
Related Weaknesses (CWE)
References
- https://github.com/kronl/cve/tree/master/MSI_Dragon_CenterBroken LinkThird Party Advisory
- https://www.microsoft.com/en-us/p/msi-dragon-center/9nh7n2bv1cqq?activetab=pivotPatchVendor Advisory
- https://github.com/kronl/cve/tree/master/MSI_Dragon_CenterBroken LinkThird Party Advisory
- https://www.microsoft.com/en-us/p/msi-dragon-center/9nh7n2bv1cqq?activetab=pivotPatchVendor Advisory
FAQ
What is CVE-2021-27965?
CVE-2021-27965 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOC...
How severe is CVE-2021-27965?
CVE-2021-27965 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-27965?
Check the references section above for vendor advisories and patch information. Affected products include: Msi Dragon Center.