CVE-2025-7771P2HIGHCVSS 8.7ExploitedPoCRansomwarev3.0.0.0 and possibly others2025-08-06
CVE-2025-7771 [HIGH] CWE-782 CVE-2025-7771: ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and wr
ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure implementation can be exploited by a malicious user-mode application to patch the running Windows kernel and invoke arbitrary kernel functions with ring-0 privileges. The vulnerabi
nvd