Description
NSecsoft 'NSecKrnl' is a Windows driver that allows a local, authenticated attacker to terminate processes owned by other users, including SYSTEM and Protected Processes by issuing crafted IOCTL requests to the driver.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NSecsoft | NSecKrnl | — | — |
Advisories 1
- VA-26-013-01 NSecKrnl driver terminates system processes with crafted IOCTL requests CISA ICS & IT advisories · Jan 13, 2026