{"id":"CVE-2026-82807","state":"PUBLISHED","title":"ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges management","description":"A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2026-08-31T16:00:08.780Z","updatedAt":"2026-09-01T18:10:50.983Z","severity":{"score":9.3,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P","source":"VulDB"},"assigner":"VulDB","products":["ieungSoft Ultra RAMDisk Pro"],"affected":[{"vendor":"ieungSoft","product":"Ultra RAMDisk Pro","versions":[{"version":"1.82","status":"affected"}],"cpes":["cpe:2.3:a:ieungsoft:ultra_ramdisk_pro:*:*:*:*:*:*:*:*"],"modules":["Kernel Driver"]}],"references":["https://vuldb.com/vuln/397226","https://vuldb.com/vuln/397226/cti","https://vuldb.com/cve/CVE-2026-82807","https://vuldb.com/submit/864537","https://winslow1984.com/books/cve-collection/page/ultra-ramdisk-pro-182-kernel-driver-urdscsisys-local-privilege-escalation-via-arbitrary-registry-value-write"],"weaknesses":["CWE-269","CWE-266"],"ingestedAt":"2026-10-29T20:13:15.269Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/82xxx/CVE-2026-82807.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-82807","state":"PUBLISHED","datePublished":"2026-08-31T16:00:08.780Z","dateUpdated":"2026-09-01T18:10:50.983Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-08-31T04:37:00.941Z"},"containers":{"cna":{"title":"ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges management","descriptions":[{"lang":"en","value":"A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"ieungSoft","product":"Ultra RAMDisk Pro","versions":[{"version":"1.82","status":"affected"}],"cpes":["cpe:2.3:a:ieungsoft:ultra_ramdisk_pro:*:*:*:*:*:*:*:*"],"modules":["Kernel Driver"]}],"references":[{"url":"https://vuldb.com/vuln/397226","name":"VDB-397226 | ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges management","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/397226/cti","name":"VDB-397226 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2026-82807","name":"CVE-2026-82807 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/864537","name":"Submit #864537 | Ultra RAMDisk Kernel Driver URDSCSI.sys 1.82 Local Privilege Escalation","tags":["third-party-advisory"]},{"url":"https://winslow1984.com/books/cve-collection/page/ultra-ramdisk-pro-182-kernel-driver-urdscsisys-local-privilege-escalation-via-arbitrary-registry-value-write","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":9.3,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P","baseSeverity":"CRITICAL"}},{"cvssV3_1":{"version":"3.1","baseScore":8.8,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":8.8,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":6.8,"vectorString":"AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-269","type":"CWE","lang":"en","description":"Improper Privilege Management"}]},{"descriptions":[{"cweId":"CWE-266","type":"CWE","lang":"en","description":"Incorrect Privilege Assignment"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-08-31T16:00:08.780Z"},"timeline":[{"time":"2026-08-31T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-08-31T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-08-31T06:42:20.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"winslow1984 (VulDB User)","type":"reporter"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}],"x_generator":["VulDB PVTS v202608"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-01T17:08:18.816828Z","id":"CVE-2026-82807","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-01T18:10:50.983Z"}}]}}}