VULNERABILITY INTELLIGENCE

CVE-2021-27965

CVSS score9.8 CRITICAL

EPSS probability11.84%

CISA KEVNot currently listed

Published2021-03-05

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request.

Weakness classification

nvd@nist.gov: CWE-120

Primary references

cve@mitre.org — Broken Link, Third Party Advisory
cve@mitre.org — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory