CVE-2008-0366: Core Security Technologies Core Force

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, which allows local users to cause a denial of service (system crash) and possibly execute arbitrary code in the kernel context via crafted arguments.

Affected products

• Core Security Technologies Core Force: up to and including 0.95.167

Published 2008-01-18. Last modified 2026-06-16.