CVE-2026-120232
8.8 HIGHpublic exploit availablePublished 2026-11-01 · Updated 2026-11-01
AI risk analysis
- Summary
- A memory corruption flaw exists in the Horizon DataSys Reboot Restore Standard kernel driver (shield.sys) up to version 13.2, triggered by the function sub_23908, allowing local attackers to corrupt memory and potentially escalate privileges.
- Exploitability
- Exploitation requires local access with low privileges and no user interaction, and a public exploit is available.
- Blast radius
- Successful exploitation could lead to full system compromise including confidentiality, integrity, and availability impacts due to privilege escalation from a local account.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to Reboot Restore Standard version 13.3 or later, as a fix is planned for the upcoming release.
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack can only be performed from a local environment. The exploit is publicly available and might be used. A fix is planned for the upcoming release.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-119
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-25291
- HIGHCVE-2026-57555
- HIGHCVE-2026-76660
- HIGHCVE-2026-86563
- HIGHCVE-2026-97448
- HIGHCVE-2026-98441
- CRITICALCVE-2026-101354PoC
- HIGHCVE-2026-109715
Related by shared AI tags and CWE weakness class. Browse the full archive.