CVE-2017-15302

In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver (e.g., cpuz143_x64.sys for version 1.43) that can result in information disclosure or elevation of privileges, because of an arbitrary read of any physical address via ioctl 0x9C402604. Any application running on the system (Windows), including sandboxed users, can issue an ioctl to this driver without any validation. Furthermore, the driver can map any physical page on the system and returns the allocated map page address to the user: that results in an information leak and EoP. NOTE: the vendor indicates that the arbitrary read itself is intentional behavior (for ACPI scan functionality); the security issue is the lack of an ACL.

• https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15302/README.mdThird Party Advisory
• https://github.com/akayn/Bugs/blob/master/CPUID/CVE-2017-15302/README.mdThird Party Advisory

Published

Oct 16, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15296The Java component in SAP CRM has CSRF. This is SAP Security…
• CVE-2017-15297SAP Hostcontrol does not require authentication for the SOAP…
• CVE-2017-15298Git through 2.14.2 mishandles layers of tree objects, which …
• CVE-2017-15299The KEYS subsystem in the Linux kernel through 4.13.7 mishan…
• CVE-2017-1530IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable…
• CVE-2017-15300The miner statistics HTTP API in EWBF Cuda Zcash Miner Versi…
• CVE-2017-15303In CPUID CPU-Z before 1.43, there is an arbitrary memory wri…
• CVE-2017-15304/bin/login.php in the Web Panel on the Airtame HDMI dongle w…
• CVE-2017-15305XSS exists in NexusPHP 1.5 via the keyword parameter to mess…
• CVE-2017-15306The kvm_vm_ioctl_check_extension function in arch/powerpc/kv…
• CVE-2017-15307Huawei Honor 8 smartphone with software versions earlier tha…
• CVE-2017-15308Huawei iReader app before 8.0.2.301 has an input validation …