CVE-2019-19820

CVE-2019-19820 describes an invalid pointer vulnerability in the kyrld.sys driver within Kyrol Internet Security 9.0.6.9. This flaw allows a local attacker to achieve privilege escalation, denial-of-service, or arbitrary code execution by exploiting an improper IOCTL handling mechanism that creates a read primitive. With a CVSS score of 7.8 (HIGH), the vulnerability requires local access and low privileges, but its exploitation is straightforward with no user interaction needed, leading to high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.