Bypass Record
BYOVD (Vulnerable Driver) × Riot Games Vanguard
A publicly-reported instance of BYOVD (Vulnerable Driver) bypassing Riot Games Vanguard, recorded with its original source. Factual record; no assessment of any specific deployment.
Mechanism
The exploit directly manipulates physical memory to load an unsigned driver into kernel space, bypassing Windows DSE and Vanguard's kernel-level protections. It uses a driver mapping engine, kernel context handler, and driver image processor to map physical pages, resolve imports, and establish communication channels for privileged memory operations on the game process.
This is a record of a publicly-reported event, not an assessment of any specific organization's deployment. Detection and mitigation notes are drawn from the cited source. Where the source is silent, fields are omitted.