CVE-2019-19197: Kyrolsecuritylabs Kyrol Internet Security

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

IOCTL Handling in the kyrld.sys driver in Kyrol Internet Security 9.0.6.9 allows an attacker to achieve privilege escalation, denial-of-service, and code execution via usermode because 0x9C402401 using METHOD_NEITHER results in a read primitive.

Affected products

• Kyrolsecuritylabs Kyrol Internet Security: version 9.0.6.9 only

Published 2019-11-21. Last modified 2026-06-17.