CVE-2025-66678

CRITICAL 9.8CVE-2025-66678 · Published 04/03/2026 · updated 17/06/2026

In short

CVE-2025-66678 is a CRITICAL (CVSS 9.8) vulnerability affecting hardware read & write utility (faintsnow).
Chance of exploitation in the next 30 days (EPSS): 0.74%, higher than 54.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hardware read & write utility faintsnow	`≤ 1.25.11.26`	No fix yet

Description

An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write operations via a crafted request.

References

Faintsnow/HE · Broken Link
cwjchoi01/CVE-2025-66678 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free