CVE-2026-19189
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A security flaw has been discovered in PowerISO 9.3.0.0, affecting some unknown functionality in the scdemu.sys library of the Kernel Driver component. The manipulation results in improper privilege management. The attack requires local access, and the exploit has been released. The vendor did not respond.
Risk Assessment
The risk includes the possibility of local privilege escalation, potentially leading to full system compromise.
Recommendation
It is recommended to stop using PowerISO until a patch is released and monitor systems for unauthorized activities.
Other vulnerabilities in PowerISO
See all- CVE-2017-2823High
A use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A specially crafted .ISO file can lead to potential code execution.
- CVE-2017-2817High
A stack buffer overflow vulnerability exists in the ISO parsing functionality of PowerISO 6.8. A specially crafted ISO file can lead to potential code execution.
Original NVD description (English source)
A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functionality in the library C:\Windows\System32\drivers\scdemu.sys of the component Kernel Driver. The manipulation results in improper privilege management. The attack is only possible with local access. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.