CVE-2022-45770

Description

Improper input validation in driver adgnetworkwfpdrv.sys in Adguard For Windows x86 up to version 7.11 allows attacker to gain local privileges escalation.

CVSS score 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

References

• https://cve.report/CVE-2022-45770
• https://adguard.com/en/versions/windows/release.html#version-71140780
• https://xakep.ru/2023/01/27/aguard-cve/ (rus, paywalled)
• https://hackmag.com/security/aguard-cve/ (eng, free)

Demo