CVE-2026-94425

HighCVSS 8.8

Published: 21/09/2026(UTC)Updated: 22/09/2026(UTC)Translated: 22/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

2th percentile - higher than 2% of all known CVEs

Summary

A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management, and attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.

Risk Assessment

A local attacker can exploit improper privilege management to escalate privileges on the system, potentially leading to full machine compromise. The vendor has not released a fix or responded to the report.

Recommendation

Monitor Moore Threads communications for a driver update and apply the fix as soon as it is available. Until then, restrict local access to machines with this driver and consider removing it if not essential.

Other vulnerabilities in Moore Threads MTT S80 Driver Package

CVE-2026-94424High
A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub_140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The vendor was contacted early about this disclosure but did not respond in any way.

Original NVD description (English source)

A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS