Vulnerabilities > Winmagic

DATE CVE VULNERABILITY TITLE RISK
2020-06-22 CVE-2020-11520 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Winmagic Securedoc
The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to write to arbitrary kernel memory addresses because the IOCTL dispatcher lacks pointer validation.
local
low complexity
winmagic CWE-119
7.8
2020-06-22 CVE-2020-11519 Unspecified vulnerability in Winmagic Securedoc
The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earlier allows local users to read or write to physical disc sectors via a \\.\SecureDocDevice handle.
local
low complexity
winmagic
7.8
2019-04-08 CVE-2018-20341 Unquoted Search Path or Element vulnerability in Winmagic Securedoc Disk Encryption 4.60.0
WINMAGIC SecureDoc Disk Encryption software before 8.3 has an Unquoted Service Path vulnerability, which could allow an attacker to execute arbitrary code on a target system.
local
low complexity
winmagic CWE-428
7.8