CVE-2026-12217
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5, affecting an unknown function in the dvdfabio.sys library of the Signed Kernel Driver component. Manipulation leads to improper privilege management.
Risk Assessment
The attack must be approached locally, and the public disclosure of the exploit may increase the risk of this vulnerability being exploited within the organization.
Recommendation
It is recommended to update the software to the latest version and to monitor systems for potential attack attempts.
Original NVD description (English source)
A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of the component Signed Kernel Driver. The manipulation leads to improper privilege management. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.