A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. (CVE-2026-108835)

CVE-2026-108835 describes a privilege management flaw in Yungengxin Yun Jia Security Guard versions up to 2.7.1.9. Specifically, the vulnerability is located in the function sub_14000885C of the kgameprotect.sys library. By manipulating the Pid argument, an attacker with local access can cause improper privilege management. The vendor was contacted early but did not provide any response or remediation information. No known exploits are reported in the wild.

The vulnerability allows a local attacker to manipulate privilege management, potentially leading to limited integrity and availability impacts. Confidentiality is not affected. The medium CVSS score reflects the requirement for local access and limited impact scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded to disclosure, no official fix or workaround is currently available. Users should restrict local access to trusted users only until a patch is released.