{"id":"CVE-2026-29923","aliases":["EUVD-2026-21014","GHSA-g859-2xvj-jr82"],"status":"published","title":"The pstrip64.sys driver in EnTech Taiwan PowerStrip \u003c=3.90.736 allows local users to escalate...","description":"The pstrip64.sys driver in EnTech Taiwan PowerStrip \u003c=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00137,"percentile":0.03174,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-269"],"published":"2026-04-09T00:00:00Z","modified":"2026-06-17T10:29:56Z","exploits":[{"source":"pocgithub","id":"Smarttfoxx/CVE-2026-29923","title":"Smarttfoxx/CVE-2026-29923","date":"2026-01-23","url":"https://github.com/Smarttfoxx/CVE-2026-29923"},{"source":"pocgithub","id":"athenasec16/CVE-2026-29923","title":"athenasec16/CVE-2026-29923","date":"2026-04-10","url":"https://github.com/athenasec16/CVE-2026-29923"},{"source":"pocgithub","id":"mein-0/cve-2026-29923","title":"mein-0/cve-2026-29923","date":"2026-05-24","url":"https://github.com/mein-0/cve-2026-29923"}],"references":[{"url":"https://entechtaiwan.com/util/ps.shtm"},{"url":"https://packetstorm.news/files/id/218394/","tags":["exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-29923"},{"url":"https://packetstorm.news/files/id/218394"},{"url":"https://github.com/advisories/GHSA-g859-2xvj-jr82"}],"sources":{"cve":[{"id":"CVE-2026-29923","description":"The pstrip64.sys driver in EnTech Taiwan PowerStrip \u003c=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures.","status":"published","published":"2026-04-09T00:00:00Z","modified":"2026-04-14T16:35:10.31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:19:56.284359Z"}],"euvd":[{"id":"EUVD-2026-21014","description":"The pstrip64.sys driver in EnTech Taiwan PowerStrip \u003c=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures.","status":"published","published":"2026-04-09T00:00:00Z","modified":"2026-04-14T16:35:10Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:24:25.607055Z"}],"ghsa":[{"id":"GHSA-g859-2xvj-jr82","title":"The pstrip64.sys driver in EnTech Taiwan PowerStrip \u003c=3.90.736 allows local users to escalate...","description":"The pstrip64.sys driver in EnTech Taiwan PowerStrip \u003c=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures.","status":"published","published":"2026-04-09T21:31:29Z","modified":"2026-04-14T18:31:37Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:07:30.088478Z"}],"nvd":[{"id":"CVE-2026-29923","description":"The pstrip64.sys driver in EnTech Taiwan PowerStrip \u003c=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures.","status":"published","published":"2026-04-09T20:16:24.693Z","modified":"2026-06-17T10:29:56.247Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:12:13.902911Z"}]}}