<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: pedestal software</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2004-1718: The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a </title><link>https://patchthecve.com/cve/CVE-2004-1718.html</link><guid>https://patchthecve.com/cve/CVE-2004-1718.html</guid><pubDate>Tue, 16 Jun 2026 22:08:16 +0000</pubDate><description>LOW 2.1: The ZwOpenSection function in Integrity Protection Driver (IPD) 1.4 and earlier allows local users to cause a denial of service (crash) via an invalid pointer in the &quot;oa&quot; argument.</description></item><item><title>CVE-2003-1246: NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to</title><link>https://patchthecve.com/cve/CVE-2003-1246.html</link><guid>https://patchthecve.com/cve/CVE-2003-1246.html</guid><pubDate>Tue, 16 Jun 2026 22:03:47 +0000</pubDate><description>LOW 2.1: NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver (IPD) 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \winnt\system32\drivers using the subst command.</description></item><item><title>CVE-2002-2127: Integrity Protection Driver (IPD) 1.2 and earlier blocks access to \Device\PhysicalMemory by its name, which c</title><link>https://patchthecve.com/cve/CVE-2002-2127.html</link><guid>https://patchthecve.com/cve/CVE-2002-2127.html</guid><pubDate>Tue, 16 Jun 2026 22:00:42 +0000</pubDate><description>LOW 2.1: Integrity Protection Driver (IPD) 1.2 and earlier blocks access to \Device\PhysicalMemory by its name, which could allow local privileged processes to overwrite kernel memory by accessing the device through a symlink.</description></item><item><title>CVE-2002-2126: restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allo</title><link>https://patchthecve.com/cve/CVE-2002-2126.html</link><guid>https://patchthecve.com/cve/CVE-2002-2126.html</guid><pubDate>Tue, 16 Jun 2026 22:00:42 +0000</pubDate><description>LOW 2.1: restrictEnabled in Integrity Protection Driver (IPD) 1.2 delays driver installation for 20 minutes, which allows local users to insert malicious code by setting system clock to an earlier time.</description></item></channel></rss>