Local Privilege Escalation Vulnerability in K7 Security Anti-Malware Suite

CVE-2025-1055

What is CVE-2025-1055?

A vulnerability in the K7 Security Anti-Malware suite's K7RKScan.sys driver allows low-privilege users to send specially crafted IOCTL requests, which can terminate numerous processes that run with higher privileges. This vulnerability is due to inadequate access controls within the driver's IOCTL handler, permitting unprivileged users to execute actions typically reserved for privileged accounts in kernel space. If exploited, this flaw can cause significant disruptions, leading to denial of service for critical services or applications.

References