This vulnerability affects DVDFab Virtual Drive 2.0.0.5, specifically an unknown function within the signed kernel driver library dvdfabio.sys. The issue results in improper privilege management, potentially allowing a local attacker with limited privileges to escalate their privileges. The vulnerability has a CVSS 4.0 score of 8.5, indicating high severity. Although the exploit has been publicly disclosed, there is no known exploit in the wild and no vendor response or patch has been issued.

An attacker with local access can exploit this vulnerability to gain elevated privileges on the affected system. This could lead to unauthorized actions at a higher privilege level than intended by the system's security policy. The vulnerability does not require user interaction and has a high impact on confidentiality, integrity, and availability according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should restrict local access to trusted users only and monitor for any suspicious activity related to DVDFab Virtual Drive. Avoid running untrusted code locally on systems with this software installed until a fix is released.