Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The driver in Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to arbitrary memory, I/O ports, and MSRs. This can be exploited for privilege escalation, code execution under high privileges, and information disclosure. These signed drivers can also be used to bypass the Microsoft driver-signing policy to deploy malicious code.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-18 | 1 | Patch1 |
| 2026-06-04 | 1 | General1 |
45% · CVE-2019-16098 The Land Is Everywhere Now: A 2026 Defender's Playbook for Living-off-the-Land Attacks Across Windows and macOS
Post summary
The passage references CVE‑2019‑16098 only in the context of a playbook title, providing no additional technical details, exploits, or mitigation information.
🔒 #CyberSecurity BYOVD Threat Mitigation: Detecting EDR-Killer Drivers (CVE-2019-16098, CVE-2021… "Attackers exploit signed drivers to kill EDR. Enforce driver blocklists and…" 🔗 https://securityarsenal.com/blog/byovd-threat-mitigation-detecting-edr-killer-drivers-cve-2019-16098-cve-2021-21551 #CyberSecurity #ThreatIntel #mdr #threathunting #endpointdetection
Post summary
The blog post discusses mitigation of signed driver‑based EDR‑killer attacks for CVE‑2019‑16098 and CVE‑2021‑21551, recommending driver blocklists without providing exploit details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | msi | afterburner | 4.6.2.15658 | - | - |