CVE-2026-12786

HIGH

Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control

Title source: cna
STIX 2.1

Description

A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (5)

Core 5
Core References
Vdb Entry vdb-entry
VDB-372528 | Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control
https://vuldb.com/vuln/372528
Signature, Permissions Required signature permissions-required
VDB-372528 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/372528/cti
Third Party Advisory third-party-advisory
CVE-2026-12786 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-12786
Third Party Advisory third-party-advisory
Submit #835614 | UltraISO Premium Edition Kernel Driver bootpt64.sys 9.76 Local Privilege Escapation
https://vuldb.com/submit/835614

Scores

CVSS v3 7.8
EPSS 0.0011
EPSS Percentile 1.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-266 CWE-284
Status published
Products (50)
Ezbsystems/UltraISO Premium Edition 9.0
Ezbsystems/UltraISO Premium Edition 9.1
Ezbsystems/UltraISO Premium Edition 9.10
Ezbsystems/UltraISO Premium Edition 9.11
Ezbsystems/UltraISO Premium Edition 9.12
Ezbsystems/UltraISO Premium Edition 9.13
Ezbsystems/UltraISO Premium Edition 9.14
Ezbsystems/UltraISO Premium Edition 9.15
Ezbsystems/UltraISO Premium Edition 9.16
Ezbsystems/UltraISO Premium Edition 9.17
... and 40 more
Published Jun 21, 2026
Tracked Since Jun 21, 2026