CVE-2023-41444: Binalyze Irec

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in Binalyze IREC.sys v.3.11.0 and before allows a local attacker to execute arbitrary code and escalate privileges via the fun_1400084d0 function in IREC.sys driver.

Affected products

  • Binalyze Irec: up to and including 3.11.0

Published 2023-09-28. Last modified 2026-06-17.