CVE-2017-7441

In Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution and Sophos Clean), a crafted IOCTL with code 0x22E1C0 might lead to kernel data leaks. Because the leak occurs at the driver level, an attacker can use this vulnerability to leak some critical information about the machine such as nt!ExpPoolQuotaCookie.

• CWE-119

• https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/Exploit, Mitigation, Third Party Advisory
• https://www.nuitduhack.com/fr/planning/talk_10Third Party Advisory
• https://trackwatch.com/kernel-pool-overflow-exploitation-in-real-world-windows-10/Exploit, Mitigation, Third Party Advisory
• https://www.nuitduhack.com/fr/planning/talk_10Third Party Advisory

Published

Sep 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7435In libzypp before 20170803 it was possible to add unsigned Y…8.1
• CVE-2017-7436In libzypp before 20170803 it was possible to retrieve unsig…8.1
• CVE-2017-7437NetIQ Privileged Account Manager before 3.1 Patch Update 3 a…4.6
• CVE-2017-7438NetIQ Privileged Account Manager before 3.1 Patch Update 3 a…4.6
• CVE-2017-7439NetApp OnCommand Unified Manager Core Package 5.x before 5.2…
• CVE-2017-7440Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client …6.5
• CVE-2017-7442Nitro Pro 11.0.3.173 allows remote attackers to execute arbi…
• CVE-2017-7443apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow …
• CVE-2017-7444In Veritas System Recovery before 16 SP1, there is a DLL hij…
• CVE-2017-7446HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impac…
• CVE-2017-7447HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact…
• CVE-2017-7448The allocate_channel_framebuffer function in uncompressed_co…