CWE-782

CVEs per yearBy the year they were published

1. 202110
2. 202410
3. 20256
4. 202625

Known exploitedNewest addition to KEV first

• CVE-2021-21551

  Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information…

  Dell · dbutil

  ExploitedHigh8.8

Newest CVEs

• CVE-2026-112116

  An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical…

  ASUS · System Control Interface

  High8.5
• CVE-2026-109836

  The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or…

  ALCPU · Core Temp

  High8.4
• CVE-2026-108889

  Yungengxin Cloud Billing IOCTL Process Termination LWBilling64.sys sub_14000443C exposed ioctl with insufficient access control

  Yungengxin · Cloud Billing

  Medium4.8
• CVE-2026-84408

  QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected…

  QualitySoft Corporation · QND Premium

  High8.7
• CVE-2026-16003

  Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via…

  ASUS · Armoury Crate

  Low2.0
• CVE-2026-16004

  Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted…

  ASUS · Armoury Crate

  Medium5.9
• CVE-2026-75809

  Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by…

  ASUS · Armoury Crate

  Medium5.9
• CVE-2026-80117

  PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sys

  PassMark Software · PerformanceTest

  Medium6.9
• CVE-2026-80116

  PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL

  PassMark Software · PerformanceTest

  High8.5
• CVE-2026-80115

  PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR Write IOCTL

  PassMark Software · PerformanceTest

  Medium6.9

Vendors it comes up for most

1. ASUS6
2. PassMark Software4
3. ALCPU1
4. Avaya1
5. Dell1
6. Dynabook Inc.1
7. Fortinet1
8. GIGABYTE1
9. Hangzhou Shunwang1
10. Lenovo1