CVE-2018-8060

HWiNFO AMD64 Kernel driver version 8.98 and lower allows an unprivileged user to send an IOCTL to the device driver. If input and/or output buffer pointers are NULL or if these buffers' data are invalid, a NULL/invalid pointer access occurs, resulting in a Windows kernel panic aka Blue Screen. This affects IOCTLs higher than 0x85FE2600 with the HWiNFO32 symbolic device name.

• CWE-476

• https://github.com/otavioarj/SIOCtlExploit, Third Party Advisory
• https://github.com/otavioarj/SIOCtlExploit, Third Party Advisory

Published

May 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-8049The Stealth endpoint in Unisys Stealth SVG 2.8.x, 3.0.x befo…
• CVE-2018-8050The af_get_page() function in lib/afflib_pages.cpp in AFFLIB…
• CVE-2018-8056Physical path Leakage exists in Western Bridge Cobub Razor 0…
• CVE-2018-8057A SQL Injection vulnerability exists in Western Bridge Cobub…
• CVE-2018-8058CMS Made Simple (CMSMS) 2.2.6 has XSS in admin/moduleinterfa…
• CVE-2018-8059The Djelibeybi configuration examples for use of NGINX in SU…
• CVE-2018-8061HWiNFO AMD64 Kernel driver version 8.98 and lower allows an …
• CVE-2018-8062A cross-site scripting (XSS) vulnerability on Comtrend AR-53…5.4
• CVE-2018-8065An issue was discovered in the web server in Flexense SyncBr…
• CVE-2018-8069QCMS version 3.0 has XSS via the webname parameter to the /b…
• CVE-2018-8070QCMS version 3.0 has XSS via the title parameter to the /gue…
• CVE-2018-8071Mautic before v2.13.0 has stored XSS via a theme config file…