D7EAD/CVE-2025-61156

D7EAD/CVE-2025-61156

GitHubGitHub
GitHubgithub.com
www.cve.orgwww.cve.org
Releases0
Stars2
Disclosure for CVE-2025-61156, an insecure access control, kernel-mode vulnerability found in ThreatFire System Monitor abused in the wild for BYOVD and EDR evasion.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-61156↗
7.8 HIGH—

Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL.