{"id":"CVE-2026-94425","published":"2026-09-21T23:16:56.697","lastModified":"2026-09-22T19:04:55.677","description":"A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-266","CWE-269"],"vendors":[],"products":[],"references":[{"url":"https://vuldb.com/cve/CVE-2026-94425","tags":[]},{"url":"https://vuldb.com/submit/894809","tags":[]},{"url":"https://vuldb.com/vuln/408151","tags":[]},{"url":"https://vuldb.com/vuln/408151/cti","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The vulnerability in Moore Threads MTT S80 Driver Package 340.150 allows for improper privilege management, enabling local attackers to exploit it for high impact consequences.","exploitability":"Exploitation requires local access and manipulation of the IOCTL Handler function, making it moderately difficult to exploit.","blast_radius":"If exploited, this vulnerability could result in high impact consequences, including data compromise, system integrity compromise, and availability issues.","remediation":"Disable the affected feature or upgrade to the latest version of the driver package.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["local-privilege-escalation","driver-vulnerability","improper-privilege-management"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-29T09:14:58.887Z"}}