CVE-2026-18769
A local low privileged attacker can move arbitrary physical memory content via TcRouter.sys because of exposed IOCTL function calls resultin
CVSS
7.8
Alta
EPSS
0.1%
p4
KEV
—
Exploit Today
1
0-100
Publicado: 11 de nov. de 2026 · Última mod.: 12 de nov. de 2026 · CWE-782
0.1%EPSS · 30 dias0.1%
2026-11-112026-11-13
A local low privileged attacker can move arbitrary physical memory content via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1292618.2 ALT—
———A vulnerability was found in Kingston FURY CTRL RGB Control Software up to 2.0.66.0. The impacted element is an unknown function in the library NTIOLib_X64.sys of the component IOCTL Handler. Performing a manipulation results in exposed ioctl with insufficient access control. The attack is only possible with local access.10hCVE-2026-187687.8 ALT3.7%
——1A local low privileged attacker can access arbitrary physical memory or define its mapping via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.2dCVE-2026-187677.8 ALT3.7%
——1A local low privileged attacker or process can access I/O ports via TcRouter.sys because of exposed IOCTL function calls resulting in a full compromise of the affected devices.2dCVE-2026-112116—1.1%
——0An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system.
Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.2dCVE-2026-1098366.7 MÉD2.0%
——1The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written.8dCVE-2026-1088894.4 MÉD1.9%
——1A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_14000443C in the library LWBilling64.sys of the component IOCTL Process Termination. Executing a manipulation of the argument Pid can lead to exposed ioctl with insufficient access control. The attack needs to be launched locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.31d