CVE-2026-82807CWE-266CWE-269privilege-escalation

CVE-2026-82807

High · published August 31, 2026

CVSS v3.1
8.8
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

A vulnerability was determined in ieungSoft Ultra RAMDisk Pro 1.82. This issue affects some unknown processing in the library URDSCSI.sys of the component Kernel Driver. This manipulation causes improper privilege management. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
9.3 · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
EPSS
0.00162 · 5.1th percentile
Weaknesses
CWE-266 · Incorrect Privilege Assignment; CWE-269 · Improper Privilege Management
Published
2026-08-31T20:19Z
References (5)
https://vuldb.com/cve/CVE-2026-82807 · [email protected]https://vuldb.com/submit/864537 · [email protected]https://vuldb.com/vuln/397226 · [email protected]https://vuldb.com/vuln/397226/cti · [email protected]https://winslow1984.com/books/cve-collection/page/ultra-ramdisk-pro-182-kernel-driver-urdscsisys-local-privilege-escalation-via-arbitrary-registry-value-write · [email protected]
EPSS history
Timeline
  • 02 SEP 03:40Z
    EPSS moved — → 0%
    epss
  • 31 AUG 16:00Z
    ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges management
    cvelistv5