CVE-2026-82807
ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges management
- State
- Published
- Severity
- 9.3 Critical
- Published
- Aug 31, 2026
- Updated
- Sep 1, 2026
- Reserved
- Aug 31, 2026
Description
A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P | VulDB |
| 3.1 | 8.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 3.0 | 8.8 High | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R | VulDB |
| 2.0 | 6.8 Medium | AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Ultra RAMDisk ProieungSoft |
|
References
- VDB-397226 | ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges managementvdb-entry
- VDB-397226 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- CVE-2026-82807 | CVE Analysis and Reportthird-party-advisory
- Submit #864537 | Ultra RAMDisk Kernel Driver URDSCSI.sys 1.82 Local Privilege Escalationthird-party-advisory
- https://winslow1984.com/books/cve-collection/page/ultra-ramdisk-pro-182-kernel-driver-urdscsisys-local-privilege-escalation-via-arbitrary-registry-value-writeexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.