This page lists publicly disclosed CVE vulnerabilities affecting paragon-software paragon_hard_disk_manager (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-0289 | Various Paragon Software products contain an insecure kernel resource access vulnerability facilitated by the driver not validating the MappedSystemVa pointer before passing it to HalReturnToFirmware, which can allows an attacker the ability to compromise the service. | [email protected] | 7.8 | 0.31% | 2025-03-03 | 2026-06-17 |
| CVE-2025-0288 | Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalation. | [email protected] | 7.8 | 0.46% | 2025-03-03 | 2026-06-17 |
| CVE-2025-0287 | Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation. | [email protected] | 5.1 | 0.34% | 2025-03-03 | 2026-06-17 |
| CVE-2025-0286 | Various Paragon Software products contain an arbitrary kernel memory write vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to execute arbitrary code on the victim machine. | [email protected] | 8.4 | 0.36% | 2025-03-03 | 2026-06-17 |
| CVE-2025-0285 | Various Paragon Software products contain an arbitrary kernel memory mapping vulnerability within biontdrv.sys that is caused by a failure to properly validate the length of user supplied data, which can allow an attacker to perform privilege escalation exploits. | [email protected] | 7.8 | 0.31% | 2025-03-03 | 2026-06-17 |