CVE-2026-12780

HIGH

AOMEI Backupper Kernel Driver amwrtdrv.sys access control

Title source: cna
STIX 2.1

Description

A vulnerability was determined in AOMEI Backupper up to 8.3.0. Impacted is an unknown function in the library amwrtdrv.sys of the component Kernel Driver. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

References (5)

Core 5
Core References
Vdb Entry vdb-entry
VDB-372521 | AOMEI Backupper Kernel Driver amwrtdrv.sys access control
https://vuldb.com/vuln/372521
Signature, Permissions Required signature permissions-required
VDB-372521 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/372521/cti
Third Party Advisory third-party-advisory
CVE-2026-12780 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-12780
Third Party Advisory third-party-advisory
Submit #835609 | AOMEI AOMEI Backupper Kernel Driver amwrtdrv.sys 8.3.0 Local Privilege Escapation
https://vuldb.com/submit/835609

Scores

CVSS v3 7.8
EPSS 0.0016
EPSS Percentile 5.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-266 CWE-284
Status published
Products (4)
AOMEI/Backupper 8.0
AOMEI/Backupper 8.1
AOMEI/Backupper 8.2
AOMEI/Backupper 8.3.0
Published Jun 21, 2026
Tracked Since Jun 21, 2026