[2020] Why anti-cheat software utilize kernel drivers; a view from reverse-engineering experts

Originally posted by SouvenirSubmarine

The Realtek HD Audio Driver package is present on all Windows machines that feature a Realtek sound card, rendering all of them vulnerable to attacks. Exploitation, however, requires the attacker to have administrator privileges.

Isn't this is exactly why I should be wary about granting software like Vanguard administrator privileges?

You should be wary. You should carefully consider anything you install on your computer, user-mode or ring-0.

The comments about other drivers are just meant to put the risk into perspective; you already have lots of drivers with vulnerabilities running in ring-0 already and you probably didn't know about it.

Recent Valorant Posts

premier question

Defying Dev Expectations: Omen’s Dark Cover

Headshot icon changed, not listed in patch notes

What's the one thing that makes a day/night difference for YOU when talking about skins?