irql/CVE-2021-31728

vulnerability in zam64.sys, zam32.sys allowing ring 0 code execution. CVE-2021-31727 and CVE-2021-31728 public reference.

CVE-2021-31727 and CVE-2021-31728

Public Reference for CVE-2021-31727

Exposes unrestricted disk read/write capabilities.

Public Reference for CVE-2021-31728

Exposes arbitrary ring 0 code execution directly.

Credit

Lima X helped with SystemBigPoolInformation idea.