Paragon Hard Disk Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:paragon-software:paragon_hard_disk_manager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Paragon Software (f09d7c86-a856-54de-a5fc-a42cd53016ac) |
|---|---|
| Product | Paragon Hard Disk Manager (fe8cac58-e2f6-57b5-ad57-e4a13a577b2b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0289 |
vulnerable | 2026-06-08 07:02:24.257224 |
CVE-2025-0289
Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service.
Published: 2025-03-03T16:24:38.134Z
Updated: 2025-09-09T14:03:26.472Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0288 |
vulnerable | 2026-06-08 07:02:24.255839 |
CVE-2025-0288
Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalation.
Published: 2025-03-03T16:24:54.853Z
Updated: 2025-09-09T14:00:21.687Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0287 |
vulnerable | 2026-06-08 07:02:24.254775 |
CVE-2025-0287
Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.
Published: 2025-03-03T16:25:08.481Z
Updated: 2025-09-05T12:08:03.175Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0286 |
vulnerable | 2026-06-08 07:02:24.253269 |
CVE-2025-0286
Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine.
Published: 2025-03-03T16:25:25.767Z
Updated: 2025-09-09T13:59:49.755Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0285 |
vulnerable | 2026-06-08 07:02:24.248899 |
CVE-2025-0285
Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits.
Published: 2025-03-03T16:25:38.704Z
Updated: 2025-09-09T13:57:18.211Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.