{"id":"CVE-2026-94425","published":"2026-09-21T23:16:56.697","lastModified":"2026-09-21T23:16:56.697","description":"A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-266","CWE-269"],"vendors":[],"products":[],"references":[{"url":"https://vuldb.com/cve/CVE-2026-94425","tags":[]},{"url":"https://vuldb.com/submit/894809","tags":[]},{"url":"https://vuldb.com/vuln/408151","tags":[]},{"url":"https://vuldb.com/vuln/408151/cti","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The vulnerability in Moore Threads MTT S80 Driver Package 340.150 allows local attackers to exploit improper privilege management, leading to potential high impact on system integrity and availability.","exploitability":"Exploitation requires local access but is considered feasible due to the nature of driver-level vulnerabilities.","blast_radius":"If exploited, this could result in significant damage to affected systems, including data loss or complete system compromise.","remediation":"Update to the latest version of Moore Threads MTT S80 Driver Package as soon as possible.","tags":["local-privilege","driver-vulnerability","high-impact"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-22T06:06:28.722Z"}}