CVE-2015-6923

CVE-2015-6923 describes a local privilege escalation vulnerability in the ndvbs module of VBox Communications Satellite Express Protocol 2.3.17.3. An attacker can exploit a specific ioctl call (0x00000ffd) to write to arbitrary physical memory locations, leading to full compromise of the system. With a CVSS score of 7.2 (High), this vulnerability requires local access but is low complexity, allowing for complete confidentiality, integrity, and availability impact. While not observed in active exploitation and lacking Metasploit/Nuclei modules, a public exploit (EDB-38225) exists, though community discussion and media coverage are minimal.