CVE-2026-82628
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub_11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management. Attacking locally is a requirement.
Risk Assessment
Improper privilege management can allow a local attacker to escalate privileges, potentially leading to full system compromise.
Recommendation
Upgrade Colorful iGameCenter to the latest version and restrict local access to the system.
Other vulnerabilities in Colorful iGameCenter
See all- CVE-2026-109520High
A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack needs to be launched locally. The vendor was contacted early about this disclosure but did not respond in any way.
- CVE-2026-94403High
A weakness has been identified in ColorFul iGameCenter 1.0.3.4, affecting the function sub_140001AF0 in the ene.sys library of the IOCTL Handler component. This manipulation causes an untrusted pointer dereference. The attack can only be executed locally, and the exploit has been made publicly available.
Original NVD description (English source)
A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub_11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management. Attacking locally is a requirement.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS