| शीर्षक | Qi-ANXIN QAX Virus Removal Version 2025.10.22 and earlier Improper Access Controls |
|---|
| विवरण | The affected driver QKSecureIO_Imp.sys rely on caller process's image to determine whether they are allowed to communicate to the mini filter driver. Attackers could impersonate a legitimate caller process image through tactics such as DLL sideloading, Process Injection to send message with specific payload to the mini filter and perform arbitrary process termination, such as protected process. |
|---|
| स्रोत | ⚠️ https://github.com/cwjchoi01/FocusKiller |
|---|
| उपयोगकर्ता | jonathan126 (UID 91181) |
|---|
| सबमिशन | 16/02/2026 03:48 AM (5 महीनों पहले) |
|---|
| संयम | 08/03/2026 09:42 AM (20 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 349763 [Qi-ANXIN QAX Virus Removal तक 2025-10-22 Mini Filter Driver QKSecureIO_Imp.sys ZwTerminateProcess अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|