CVE-2026-12782

HIGH

EaseUS Partition Master Kernel Driver EUEDKEPM.sys access control

Title source: cna
STIX 2.1

Description

A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is an unknown function in the library EUEDKEPM.sys of the component Kernel Driver. The manipulation results in improper access controls. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The affected component should be upgraded. The vendor explains: "We have confirmed that this issue was present only in older versions of the product. Our product has since been updated, and the issue has been resolved in the latest version, so it no longer exists."

References (6)

Core 6
Core References
Vdb Entry vdb-entry
VDB-372523 | EaseUS Partition Master Kernel Driver EUEDKEPM.sys access control
https://vuldb.com/vuln/372523
Signature, Permissions Required signature permissions-required
VDB-372523 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/372523/cti
Third Party Advisory third-party-advisory
CVE-2026-12782 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-12782
Third Party Advisory third-party-advisory
Submit #835612 | EaseUS Partition Master Kernel Driver EUEDKEPM.sys 14.5 Local Privilege Escapation
https://vuldb.com/submit/835612

Scores

CVSS v3 7.8
EPSS 0.0011
EPSS Percentile 1.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-266 CWE-284
Status published
Products (6)
EaseUS/Partition Master 14.0
EaseUS/Partition Master 14.1
EaseUS/Partition Master 14.2
EaseUS/Partition Master 14.3
EaseUS/Partition Master 14.4
EaseUS/Partition Master 14.5
Published Jun 21, 2026
Tracked Since Jun 21, 2026