CVE-2023-1626

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affects unknown code in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-224008.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
Jianming	Antivirus	16.2.2022.418

References

https://drive.google.com/file/d/1soMFXUAYkCttFDA_icry6q-irb2jdAxw/viewExploit, Third Party Advisory
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned31Third Party Advisory
https://vuldb.com/?ctiid.224008Permissions Required, Third Party Advisory
https://vuldb.com/?id.224008Third Party Advisory
https://drive.google.com/file/d/1soMFXUAYkCttFDA_icry6q-irb2jdAxw/viewExploit, Third Party Advisory
https://github.com/zeze-zeze/WindowsKernelVuln/tree/master/unassigned31Third Party Advisory
https://vuldb.com/?ctiid.224008Permissions Required, Third Party Advisory
https://vuldb.com/?id.224008Third Party Advisory

Timeline

Published: Mar 25, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-16275.5A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some unknown processing CVE-2023-16285.5A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library CVE-2023-16297.8A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is the function 0x22201 CVE-2023-16305.5A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the func CVE-2023-16315.5A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in t CVE-2023-16335.5A credentials leak flaw was found in OpenStack Barbican. This flaw allows a local authenticated attacker to read the configuration file, gai CVE-2023-16349.8A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/info_deal.p CVE-2023-16356.1A vulnerability was found in OTCMS 6.72. It has been declared as problematic. Affected by this vulnerability is the function AutoRun of the CVE-2023-16365.0A vulnerability was found in OpenStack Barbican containers. This vulnerability is only applicable to deployments that utilize an all-in-one CVE-2023-16375.5A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management CVE-2023-16385.5A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been rated as problematic. Affected by this issue is the function 0x800 CVE-2023-16395.5A vulnerability classified as problematic has been found in IObit Malware Fighter 9.4.0.776. This affects the function 0x8001E04C in the lib