Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    4 vulnerabilities by ColorFul

    CVE-2026-94403 (GCVE-0-2026-94403)

    Vulnerability from nvd – Published: 2026-09-21 18:30 – Updated: 2026-09-22 15:40
    VLAI
    Title
    ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference
    Summary
    A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-22 14:50 UTC
    CWE
    • CWE-822 - Untrusted Pointer Dereference
    References
    URL Tags
    https://vuldb.com/vuln/408110 vdb-entrytechnical-description
    https://vuldb.com/vuln/408110/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-94403 third-party-advisory
    https://vuldb.com/submit/894821 third-party-advisory
    Impacted products
    Vendor Product Version
    ColorFul iGameCenter Affected: 1.0.3.4
        cpe:2.3:a:colorful:igamecenter:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-94403",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-22T14:50:11.301835Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-22T15:40:51.040Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:colorful:igamecenter:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "IOCTL Handler"
              ],
              "product": "iGameCenter",
              "vendor": "ColorFul",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.3.4"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Bigcat (VulDB User)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB CNA Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 9.3,
                "baseSeverity": "CRITICAL",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 6.8,
                "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-822",
                  "description": "Untrusted Pointer Dereference",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-21T18:30:09.358Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-408110 | ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/vuln/408110"
            },
            {
              "name": "VDB-408110 | CTI Indicators (IOB, IOC, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/408110/cti"
            },
            {
              "name": "CVE-2026-94403 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-94403"
            },
            {
              "name": "Submit #894821 | ColorFul iGameCenter 1.0.3.4 Arbitrary kernel memory read and write",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/894821"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-09-21T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-09-21T02:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-09-21T15:50:21.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference",
          "x_generator": [
            "VulDB PVTS v202609"
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-94403",
        "datePublished": "2026-09-21T18:30:09.358Z",
        "dateReserved": "2026-09-21T13:44:57.046Z",
        "dateUpdated": "2026-09-22T15:40:51.040Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-82628 (GCVE-0-2026-82628)

    Vulnerability from nvd – Published: 2026-08-31 07:00 – Updated: 2026-08-31 14:34
    VLAI
    Title
    Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management
    Summary
    A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub_11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management. Attacking locally is a requirement.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-31 14:34 UTC
    CWE
    • CWE-269 - Improper Privilege Management
    • CWE-266 - Incorrect Privilege Assignment
    References
    URL Tags
    https://vuldb.com/vuln/397126 vdb-entrytechnical-description
    https://vuldb.com/vuln/397126/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-82628 third-party-advisory
    https://vuldb.com/submit/893754 third-party-advisory
    Impacted products
    Vendor Product Version
    Colorful iGameCenter Affected: 2.0.0.81
        cpe:2.3:a:colorful:igamecenter:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-82628",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-31T14:34:47.043759Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-31T14:34:57.895Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:colorful:igamecenter:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "IOCTL Dispatch"
              ],
              "product": "iGameCenter",
              "vendor": "Colorful",
              "versions": [
                {
                  "status": "affected",
                  "version": "2.0.0.81"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Element2023H (VulDB User)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB Vulnerability Moderation Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub_11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management. Attacking locally is a requirement."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 9.3,
                "baseSeverity": "CRITICAL",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 6.8,
                "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:ND/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-269",
                  "description": "Improper Privilege Management",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-266",
                  "description": "Incorrect Privilege Assignment",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-31T07:00:08.968Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-397126 | Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/vuln/397126"
            },
            {
              "name": "VDB-397126 | CTI Indicators (IOB, IOC, TTP, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/397126/cti"
            },
            {
              "name": "CVE-2026-82628 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-82628"
            },
            {
              "name": "Submit #893754 | Colorful (\u4e03\u5f69\u8679) iGameCenter 2.0.0.81 Improper Privilege Management",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/893754"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-08-30T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-08-30T02:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-08-30T12:04:35.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management",
          "x_generator": [
            "VulDB PVTS v202608"
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-82628",
        "datePublished": "2026-08-31T07:00:08.968Z",
        "dateReserved": "2026-08-30T09:59:30.384Z",
        "dateUpdated": "2026-08-31T14:34:57.895Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-94403 (GCVE-0-2026-94403)

    Vulnerability from cvelistv5 – Published: 2026-09-21 18:30 – Updated: 2026-09-22 15:40
    VLAI
    Title
    ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference
    Summary
    A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-22 14:50 UTC
    CWE
    • CWE-822 - Untrusted Pointer Dereference
    References
    URL Tags
    https://vuldb.com/vuln/408110 vdb-entrytechnical-description
    https://vuldb.com/vuln/408110/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-94403 third-party-advisory
    https://vuldb.com/submit/894821 third-party-advisory
    Impacted products
    Vendor Product Version
    ColorFul iGameCenter Affected: 1.0.3.4
        cpe:2.3:a:colorful:igamecenter:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-94403",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-09-22T14:50:11.301835Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-09-22T15:40:51.040Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:colorful:igamecenter:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "IOCTL Handler"
              ],
              "product": "iGameCenter",
              "vendor": "ColorFul",
              "versions": [
                {
                  "status": "affected",
                  "version": "1.0.3.4"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Bigcat (VulDB User)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB CNA Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 9.3,
                "baseSeverity": "CRITICAL",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 6.8,
                "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-822",
                  "description": "Untrusted Pointer Dereference",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-21T18:30:09.358Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-408110 | ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/vuln/408110"
            },
            {
              "name": "VDB-408110 | CTI Indicators (IOB, IOC, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/408110/cti"
            },
            {
              "name": "CVE-2026-94403 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-94403"
            },
            {
              "name": "Submit #894821 | ColorFul iGameCenter 1.0.3.4 Arbitrary kernel memory read and write",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/894821"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-09-21T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-09-21T02:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-09-21T15:50:21.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference",
          "x_generator": [
            "VulDB PVTS v202609"
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-94403",
        "datePublished": "2026-09-21T18:30:09.358Z",
        "dateReserved": "2026-09-21T13:44:57.046Z",
        "dateUpdated": "2026-09-22T15:40:51.040Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-82628 (GCVE-0-2026-82628)

    Vulnerability from cvelistv5 – Published: 2026-08-31 07:00 – Updated: 2026-08-31 14:34
    VLAI
    Title
    Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management
    Summary
    A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub_11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management. Attacking locally is a requirement.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-31 14:34 UTC
    CWE
    • CWE-269 - Improper Privilege Management
    • CWE-266 - Incorrect Privilege Assignment
    References
    URL Tags
    https://vuldb.com/vuln/397126 vdb-entrytechnical-description
    https://vuldb.com/vuln/397126/cti signaturepermissions-required
    https://vuldb.com/cve/CVE-2026-82628 third-party-advisory
    https://vuldb.com/submit/893754 third-party-advisory
    Impacted products
    Vendor Product Version
    Colorful iGameCenter Affected: 2.0.0.81
        cpe:2.3:a:colorful:igamecenter:*:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-82628",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-31T14:34:47.043759Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-31T14:34:57.895Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:colorful:igamecenter:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "IOCTL Dispatch"
              ],
              "product": "iGameCenter",
              "vendor": "Colorful",
              "versions": [
                {
                  "status": "affected",
                  "version": "2.0.0.81"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Element2023H (VulDB User)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB Vulnerability Moderation Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability was found in Colorful iGameCenter 2.0.0.81. This vulnerability affects the function sub_11504 in the library WinRing0x64.sys of the component IOCTL Dispatch. Performing a manipulation of the argument PhysicalAddress/AlignNumer/AlignSize results in improper privilege management. Attacking locally is a requirement."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 9.3,
                "baseSeverity": "CRITICAL",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 8.8,
                "baseSeverity": "HIGH",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 6.8,
                "vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:ND/RL:ND/RC:UR",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-269",
                  "description": "Improper Privilege Management",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-266",
                  "description": "Incorrect Privilege Assignment",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-31T07:00:08.968Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-397126 | Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/vuln/397126"
            },
            {
              "name": "VDB-397126 | CTI Indicators (IOB, IOC, TTP, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/397126/cti"
            },
            {
              "name": "CVE-2026-82628 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-82628"
            },
            {
              "name": "Submit #893754 | Colorful (\u4e03\u5f69\u8679) iGameCenter 2.0.0.81 Improper Privilege Management",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/893754"
            }
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-08-30T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-08-30T02:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-08-30T12:04:35.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "Colorful iGameCenter IOCTL Dispatch WinRing0x64.sys sub_11504 privileges management",
          "x_generator": [
            "VulDB PVTS v202608"
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-82628",
        "datePublished": "2026-08-31T07:00:08.968Z",
        "dateReserved": "2026-08-30T09:59:30.384Z",
        "dateUpdated": "2026-08-31T14:34:57.895Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }