CVE-2026-12781

HIGH

EaseUS Partition Master Kernel Driver epmntdrv.sys access control

Title source: cna
STIX 2.1

Description

A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an unknown function in the library epmntdrv.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be performed locally. The exploit is publicly available and might be used. You should upgrade the affected component. The vendor explains: "We have confirmed that this issue was present only in older versions of the product. Our product has since been updated, and the issue has been resolved in the latest version, so it no longer exists."

References (6)

Core 6
Core References
Vdb Entry vdb-entry
VDB-372522 | EaseUS Partition Master Kernel Driver epmntdrv.sys access control
https://vuldb.com/vuln/372522
Signature, Permissions Required signature permissions-required
VDB-372522 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/372522/cti
Third Party Advisory third-party-advisory
CVE-2026-12781 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-12781
Third Party Advisory third-party-advisory
Submit #835611 | EaseUS Partition Master Kernel Driver epmntdrv.sys 14.5 Local Privilege Escapation
https://vuldb.com/submit/835611

Scores

CVSS v3 7.8
EPSS 0.0011
EPSS Percentile 1.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-266 CWE-284
Status published
Products (6)
EaseUS/Partition Master 14.0
EaseUS/Partition Master 14.1
EaseUS/Partition Master 14.2
EaseUS/Partition Master 14.3
EaseUS/Partition Master 14.4
EaseUS/Partition Master 14.5
Published Jun 21, 2026
Tracked Since Jun 21, 2026