CVE-2024-33226

9.9 criticalEPSS 0.4%

Critical (9.9). EPSS 0.4% chance of exploitation in the next 30 days.

An issue in the component Access64.sys of Wistron Corporation TBT Force Power Control v1.0.0.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

Severity

CVSS 3.1

9.9 critical

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2024-05-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33226
https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33226

Check your stack JSON