CVE-2026-79417 Details

A local denial-of-service vulnerability has been identified in the ArgusMonitor.sys driver for Argotronic eGbR ArgusMonitor versions through 7.4.02. The issue arises from improper access control that allows low-privileged users to bypass device handle access restrictions. This is achieved through a time-of-check-to-time-of-use (TOCTOU) condition in the IRP_MJ_CREATE handler, enabling the manipulation of the process image path to evade security checks. Exploitation involves sending a crafted IOCTL 0x9C4024A8 request, which disables critical CPU power-management features, leading to system instability and a bugcheck.

Users are advised to update to the patched version of ArgusMonitor, which is available on the Argus Monitor website.