CVE-2026-6102

HighCVSS 7.8

Published: 29/07/2026(UTC)Updated: 31/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

0th percentile - higher than 0% of all known CVEs

Summary

The NTIOLib_X64.sys driver in MSI Center fails to properly validate command origins, allowing a local attacker to escalate privileges to SYSTEM and execute arbitrary code.

Risk Assessment

An attacker with limited system access can gain full control of the machine, installing malware or stealing data.

Recommendation

Update MSI Center to the latest version available from the manufacturer.

Other vulnerabilities in MSI Center

CVE-2022-31877High
An issue in the MSI.TerminalServer.exe component of MSI Center v1.0.41.0 allows attackers to escalate privileges via a crafted TCP packet.

Original NVD description (English source)

MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of MSI Center. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the NTIOLib_X64.sys driver. The issue results from insufficient validation of the origin of commands. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-28935.