This vulnerability affects DVDFab Virtual Drive 2.0.0.5, specifically an unknown function within the signed kernel driver library dvdfabio.sys. It results in improper privilege management, potentially allowing a local attacker with limited privileges to escalate their rights. The vulnerability has a CVSS 4.0 base score of 8.5, indicating high severity. Although the exploit has been publicly disclosed, there is no indication that it is actively exploited in the wild. The vendor was contacted but has not provided any response or remediation guidance.

The vulnerability allows a local attacker to manipulate privilege management within the kernel driver, potentially leading to privilege escalation. This could enable the attacker to gain higher system privileges than intended, compromising system security. The impact is limited to local attackers and requires no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or vendor response is available, users should consider restricting local access to trusted users only and monitor for updates from the vendor. Avoid running untrusted code locally on affected systems until a patch is released.