Skip to content
OpenAdvisories
Medium VA-26-013-01 1 CVE

NSecKrnl driver terminates system processes with crafted IOCTL requests

Published Jan 13, 2026 · Updated Jan 13, 2026

Vendor: NSecsoft Product: NSecKrnl

Summary

NSecsoft 'NSecKrnl' is a Windows driver that allows a local, authenticated attacker to terminate processes owned by other users, including SYSTEM and Protected Processes by issuing crafted IOCTL requests to the driver.

Vulnerabilities 1

  • Medium 4.7
    CVE-2025-68947

    NSecsoft NSecKrnl process termination privilege escalation

    NSecsoft 'NSecKrnl' is a Windows driver that allows a local, authenticated attacker to terminate processes owned by other users, including SYSTEM and Protected Processes by issuing crafted IOCTL requests to the driver.

    NSecsoft NSecKrnl

Revision history

  1. #1.0.0

    Initial publication