CVE-2019-7240

HIGH 7.2CVE-2019-7240 · Published 25/03/2020 · updated 17/06/2026

In short

CVE-2019-7240 is a HIGH (CVSS 7.2) vulnerability affecting system monitor (moo0).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
system monitor moo0	`= 1.83`	No fix yet

Description

An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.

References

fireeye/Vulnerability-Disclosures · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free