CVE-2026-58583CWE-269

FluxInk Color Management Driver local privilege escalation

High · published July 7, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical memory mapping at \Device\PhysicalMemory. Fixed in version 1.0.7.6. The fixed driver is currently available in the Windows 11 25H2 HLK (Hardware Lab Kit). The fixed driver may be available through Windows Update or from Lenovo directly.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00145 · 3.5th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-07-07T20:33Z
EPSS history
Timeline
  • 07 JUL 20:33Z
    FluxInk Color Management Driver local privilege escalation
    cvelistv5