CVE-2026-97732CWE-347

CVE-2026-97732

Medium · published September 25, 2026

CVSS v3.1
5.1
EPSS
0%
Percentile
0.0
In the wild
Unconfirmed
What it is

IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and root-certificate strings in WIN_CERTIFICATE data ("IRONMACE Co., Ltd." and "DigiCert Trusted Root G4") instead of parsing and validating the PKCS signature data. As a result, a local unprivileged attacker may bypass this via crafted certificate data and obtain access to privileged IOCTL functionality.

The record
Technical detail
CVSS v3.1
5.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00056 · 0.0th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2026-09-25T08:17Z
References (2)
https://github.com/hseoa/ironshield-analysis · [email protected]https://store.steampowered.com/eula/2016590_eula_0 · [email protected]
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 25 SEP 03:29Z
    IRONMACE Ironshield 1.0.0.167 has a tvk.sys kernel-mode driver that authenticates client executables by checking for expected publisher and root-certificate…
    cvelistv5