CVE-2026-12217 | A security vulnerability has been detected in DVDFab Virtual… | CVSS 7.8 HIGH

Description

A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of the component Signed Kernel Driver. The manipulation leads to improper privilege management. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metadata

CVE ID: CVE-2026-12217
State: PUBLISHED
Assigner: VulDB
Reserved: 2026-06-14 13:45 UTC
Published: 2026-06-15 04:00 UTC
Last updated: 2026-06-15 04:00 UTC
Primary CWE: CWE-269
Improper Privilege Management
Vendor / Product: DVDFab / Virtual Drive
Sources: cve.org · NVD

Severity & Metrics

7.8 HIGH CVSS 3.1

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

Affected products (1)

Vendor	Product	Platform	Versions
DVDFab	Virtual Drive	—	2.0.0.5

Weakness (CWE)

CWE	Source	Description
CWE-266	cna	Incorrect Privilege Assignment
CWE-269	cna	Improper Privilege Management

CVSS scores (4)

Score	Severity	Version	Source	Vector
8.5	HIGH	4.0	cna	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
7.8	HIGH	3.1	cna	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
7.8	HIGH	3.0	cna	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
6.8	N/D	2.0	cna	AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR

References (5)

VDB-370860 | DVDFab Virtual Drive Signed Kernel Driver dvdfabio.sys privileges management https://vuldb.com/vuln/370860
VDB-370860 | CTI Indicators (IOB, IOC, TTP, IOA) https://vuldb.com/vuln/370860/cti
CVE-2026-12217 | CVE Analysis and Report https://vuldb.com/cve/CVE-2026-12217
Submit #833857 | DVDFab DVDFab Virtual Drive 2.0.0.5 Local Privilege Escapation https://vuldb.com/submit/833857
https://winslow1984.com/books/cve-collection/page/dvdfab-virtual-drive-kernel-driver-dvdfabiosys-local-privilege-escalation