{"metadata": {"vulnerability": "CVE-2026-129255", "count": 14, "kinds": {"milestone": 3, "sighting": 4, "kev": 0, "other": 7}, "linked_omitted": 0}, "data": [{"timestamp": "2026-11-13T00:00:00Z", "date_only": false, "value": "2026-11-13T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129255", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2026-11-13T01:00:00Z", "date_only": false, "value": "2026-11-13T01:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129255", "field": "containers.cna.timeline.1.time", "text": "VulDB entry created"}, {"timestamp": "2026-11-13T19:41:55.077Z", "date_only": false, "value": "2026-11-13T19:41:55.077Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-129255", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-13T20:47:02Z", "date_only": false, "value": "2026-11-13T20:47:02.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129255", "field": "containers.cna.timeline.2.time", "text": "VulDB entry last update"}, {"timestamp": "2026-11-14T12:30:17.941Z", "date_only": false, "value": "2026-11-14T12:30:17.941Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129255", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-14T12:30:17.941Z", "date_only": false, "value": "2026-11-14T12:30:17.941Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-129255", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-14T12:30:17.941Z", "date_only": false, "value": "2026-11-14T12:30:17.941Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-129255", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-14T12:38:21.182Z", "date_only": false, "value": "2026-11-14T12:38:21.182648Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117614831246195175", "record": "CVE-2026-129255", "field": "creation_timestamp", "uuid": "3b5c4286-d86e-4379-84f9-611cff8089a9", "content": "CVE-2026-129255 CoolerMaster MASTERPLUS+ Device Driver WinRing0x64.sys sub_11504 default permission A vulnerability was identified in CoolerMaster MASTERPLUS+ 1.9.6. This affects the function sub_11504 in the library WinRing0x64.sys of the component Device Driver. The manipulation of the argument PhysicalAddress leads to incorrect default permissions. The attack can only be performed from a local environment. The vendor was contacted early about this disclosure but did not respond in any way.\nhttps://www.cve.org/CVERecord?id=CVE-2026-129255https://vuldb.com/vuln/437286https://vuldb.com/vuln/437286/ctihttps://vuldb.com/cve/CVE-2026-129255https://vuldb.com/submit/1042970#CoolerMaster #MASTERPLUS+#CVE_2026_129255#bot", "url": "https://infosec.exchange/users/cve/statuses/117614831246195175"}, {"timestamp": "2026-11-14T13:17:21Z", "date_only": false, "value": "2026-11-14T13:17:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HFJG-WRX8-4H72", "record": "GHSA-HFJG-WRX8-4H72", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-14T13:30:03.774Z", "date_only": false, "value": "2026-11-14T13:30:03.774381Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3n2bm7gbbyr2b", "record": "CVE-2026-129255", "field": "creation_timestamp", "uuid": "ef9f3390-6921-4944-a649-cfbdfa368d44", "content": "CVE-2026-129255 - masterplus+\nThe CoolerMaster MASTERPLUS+ software version 1.9.6 includes a driver component that can assign incorrect access rights when handling certain memory addresses. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#masterplus #coolermaster #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3n2bm7gbbyr2b"}, {"timestamp": "2026-11-14T14:41:56.578Z", "date_only": false, "value": "2026-11-14T14:41:56.578964Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/htsfg44lieooh", "record": "CVE-2026-129255", "field": "creation_timestamp", "uuid": "96a339d9-c0e3-4493-9ff2-af12261bdcd6", "content": "CVE-2026-129255 - CoolerMaster MASTERPLUS+ Device Driver WinRing0x64.sys sub_11504 default permission\nCVE ID : CVE-2026-129255\n \n Published : Nov. 14, 2026, 1:17 p.m. | 57\u00a0minutes ago\n \n Description : A vulnerability was identified in CoolerMaster MASTERPLUS+ 1.9.6. This affec...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/htsfg44lieooh"}, {"timestamp": "2026-11-14T15:31:43Z", "date_only": false, "value": "2026-11-14T15:31:43Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HFJG-WRX8-4H72", "record": "GHSA-HFJG-WRX8-4H72", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-14T15:31:43Z", "date_only": false, "value": "2026-11-14T15:31:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HFJG-WRX8-4H72", "record": "GHSA-HFJG-WRX8-4H72", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-14T16:44:52.359Z", "date_only": false, "value": "2026-11-14T16:44:52.359315Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eventmonitor.bsky.social/post/3n2etgrbryxdr", "record": "cve-2026-129255", "field": "creation_timestamp", "uuid": "dd01e881-a0b4-48ca-8fe8-60ab446ddbbb", "content": "Developing: Critical CoolerMaster MASTERPLUS+ Vulnerability (CVE-2026-129255)\nhttps://cyber.eventmonitor.net/incident/EM-20261114-9ULZ/critical-coolermaster-masterplus-vulnerability-cve-2026-129255/\n#news #cybersecurity", "url": "https://bsky.app/profile/eventmonitor.bsky.social/post/3n2etgrbryxdr"}], "metrics": {"as_of": "2026-11-14T18:25:07.747Z", "anchors": {"origin": {"timestamp": "2026-11-14T12:30:17.941Z", "date_only": false, "value": "2026-11-14T12:30:17.941Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129255", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-14T12:30:17.941Z", "date_only": false, "value": "2026-11-14T12:30:17.941Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129255", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 21289.806056, "hours": 5.913835015555556, "days": 0.24640979231481483, "min_seconds": 21289.806056, "max_seconds": 21289.806056, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-14T12:30:17.941Z", "date_only": false, "value": "2026-11-14T12:30:17.941Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-129255", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T18:25:07.747Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}
