CVE-2026-12786

Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control

View on CVE.org
Published Jun 21, 2026 CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Description
A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control
First Time appeared Ezbsystems
Ezbsystems ultraiso Premium Edition
Weaknesses CWE-266
CWE-284
CPEs cpe:2.3:a:ezbsystems:ultraiso_premium_edition:*:*:*:*:*:*:*:*
Vendors & Products Ezbsystems
Ezbsystems ultraiso Premium Edition
References
Metrics cvssV2_0

{'score': 6.8, 'vector': 'AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.8, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}
Weaknesses

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Jun 22, 2026, 1:37 PM
Reserved
Jun 20, 2026, 9:54 AM

View source JSON

Updated
Jun 22, 2026, 1:36 PM

JSON

Status
Deferred
Published
Jun 21, 2026, 9:16 AM
Modified
Oct 25, 2026, 11:10 PM

View source JSON

No data.

Updated
Jun 23, 2026, 9:03 PM

JSON