Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-129255 1 Coolermaster 1 Masterplus 2026-11-14 8.8 High
A vulnerability was identified in CoolerMaster MASTERPLUS+ 1.9.6. This affects the function sub_11504 in the library WinRing0x64.sys of the component Device Driver. The manipulation of the argument PhysicalAddress leads to incorrect default permissions. The attack can only be performed from a local environment. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2022-50808 1 Coolermaster 1 Masterplus 2026-06-17 8.4 High
CoolerMaster MasterPlus 1.8.5 contains an unquoted service path vulnerability in the MPService that allows local attackers to execute code with elevated system privileges. Attackers can drop a malicious executable in the service path and trigger code execution during service startup or system reboot.