CVE-2026-12779

HIGH

AOMEI Dynamic Disk Manager Kernel Driver ddmdrv.sys access control

Title source: cna
STIX 2.1

Description

A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unknown processing in the library ddmdrv.sys of the component Kernel Driver. Performing a manipulation results in improper access controls. The attack must be initiated from a local position. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (5)

Core 5
Core References
Vdb Entry vdb-entry
VDB-372520 | AOMEI Dynamic Disk Manager Kernel Driver ddmdrv.sys access control
https://vuldb.com/vuln/372520
Signature, Permissions Required signature permissions-required
VDB-372520 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/372520/cti
Third Party Advisory third-party-advisory
CVE-2026-12779 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-12779
Third Party Advisory third-party-advisory
Submit #835608 | AOMEI AOMEI Dynamic Disk Manager Kernel Driver ddmdrv.sys 10.10.1 Local Privilege Escapation
https://vuldb.com/submit/835608

Scores

CVSS v3 7.8
EPSS 0.0016
EPSS Percentile 5.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-266 CWE-284
Status published
Products (2)
AOMEI/Dynamic Disk Manager 10.10.0
AOMEI/Dynamic Disk Manager 10.10.1
Published Jun 21, 2026
Tracked Since Jun 21, 2026