CVE-2019-19820

An invalid pointer vulnerability in IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execution via usermode because 0x9C402405 using METHOD_NEITHER results in a read primitive.

• CWE-763

• https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-12-04-kyrol-internet-security-invalid-pointer-vulnerability.mdExploit, Third Party Advisory
• https://nafiez.github.io/security/vulnerability/2019/12/04/kyrol-internet-security-invalid-pointer-vulnerability.htmlExploit, Third Party Advisory
• https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2019-12-04-kyrol-internet-security-invalid-pointer-vulnerability.mdExploit, Third Party Advisory
• https://nafiez.github.io/security/vulnerability/2019/12/04/kyrol-internet-security-invalid-pointer-vulnerability.htmlExploit, Third Party Advisory

Published

Jan 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19815In the Linux kernel 5.0.21, mounting a crafted f2fs filesyst…5.5
• CVE-2019-19816In the Linux kernel 5.0.21, mounting a crafted btrfs filesys…7.8
• CVE-2019-19817The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader…5.5
• CVE-2019-19818The JBIG2Decode library in npdf.dll in Nitro Free PDF Reader…5.5
• CVE-2019-19819The JBIG2Globals library in npdf.dll in Nitro Free PDF Reade…5.5
• CVE-2019-1982A vulnerability in the HTTP traffic filtering component of C…5.3
• CVE-2019-19821A post-authentication privilege escalation in the web applic…8.1
• CVE-2019-19822A certain router administration interface (that includes Rea…7.5
• CVE-2019-19823A certain router administration interface (that includes Rea…7.5
• CVE-2019-19824On certain TOTOLINK Realtek SDK based routers, an authentica…8.8
• CVE-2019-19825On certain TOTOLINK Realtek SDK based routers, the CAPTCHA t…9.8
• CVE-2019-19826The Views Dynamic Fields module through 7.x-1.0-alpha4 for D…9.8