CVE-2025-1055

K7 Security Anti-Malware: IOCTL in K7RKScan.sys Allows Arbitrary Termination of High-Privilege and System Processes by a Low-Privilege User

MEDIUM

5.6

CVSS Score

Published: June 10, 2025 at 11:23 PM UTC

Updated: June 17, 2026 at 08:38 AM UTC

1 product affected across 1 vendorK7 Security Anti-Malware

Using K7 Security Anti-Malware by K7 Security?

Get instant alerts when new vulnerabilities affect K7 Security Anti-Malware - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.6

Exploit prediction

EPSS 0.2%

SSVC

No known exploit

Description

A vulnerability in the K7RKScan.sys driver, part of the K7 Security Anti-Malware suite, allows a local low-privilege user to send crafted IOCTL requests to terminate a wide range of processes running with administrative or system-level privileges, with the exception of those inherently protected by the operating system. This flaw stems from missing access control in the driver's IOCTL handler, enabling unprivileged users to perform privileged actions in kernel space. Successful exploitation can lead to denial of service by disrupting critical services or privileged applications.