CVE-2026-57851

Katalog CVE

CVSS 7.8 · High EPSS 0,17%

Kerentanan Exposed IOCTL with Insufficient Access Control. Skor CVSS 3.1 7.8 (High) menurut vulncheck.com.

Deskripsi (NVD)

MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without administrator privileges. Attackers can exploit the accessible device object through IOCTL handlers to manipulate kernel objects, tamper with kernel-mode callbacks, bypass Protected Process Light protections, and disable security software.

Rincian

Terbit di NVD

7 Juli 2026

Terakhir diubah

10 Juli 2026

Status NVD

Deferred

CVSS 3.1

7.8 (High), sumber vulncheck.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-782: Exposed IOCTL with Insufficient Access Control

EPSS (30 hari)

0,17% peluang dieksploitasi; lebih tinggi dari 5,4% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/readmsr/MSI_FeatureManager_CVE
• https://www.vulncheck.com/advisories/msi-gamegaraj-kerncorelib64-sys-privilege-escalation-via-ioctl-handlers