CVE-2026-12217

HighCVSS 7.8/10Last modified Jul 24, 2026

Description

A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of the component Signed Kernel Driver. The manipulation leads to improper privilege management. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-266CWE-269

Affected software

VendorProductVersions
DVDFabVirtual Drive2.0.0.5

References

Timeline

Published
Jun 15, 2026
Last modified
Jul 24, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-1221707.0Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.CVE-2026-1221718.8Heap-based buffer overflow in Microsoft XPS Document Converter allows an unauthorized attacker to execute code over a network.CVE-2026-1221727.8Use after free in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally.CVE-2026-1221736.8Heap-based buffer overflow in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.CVE-2026-1221747.0Improper link resolution before file access ('link following') in Windows Task Scheduler allows an authorized attacker to elevate privilegesCVE-2026-1221757.0Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.CVE-2026-1221768.8Heap-based buffer overflow in Windows SMB allows an authorized attacker to execute code over a network.CVE-2026-1221777.5Improper link resolution before file access ('link following') in Windows iSCSI allows an unauthorized attacker to elevate privileges over aCVE-2026-1221797.0Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to elevate privileges locally.CVE-2026-122188.0A vulnerability was detected in Yealink SIP-T46U 108.87.50.1. The affected element is the function StartReportInformation of the file /api/iCVE-2026-1221827.0Improper link resolution before file access ('link following') in Windows Maps allows an authorized attacker to elevate privileges locally.CVE-2026-1221837.8Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-12217: High severity, CVSS 7.8 | Vulnix