The vulnerability CVE-2026-12779 affects AOMEI Dynamic Disk Manager versions 10.10.0 and 10.10.1. It arises from improper access controls in the kernel driver library ddmdrv.sys, allowing a local attacker with limited privileges to perform unauthorized actions. The issue does not require user interaction and has a CVSS 4.0 base score of 8.5, indicating high impact on confidentiality, integrity, and availability. The vendor was contacted but has not provided any response or fix. No official remediation or patch has been published, and the exploit details have been made public.

Successful exploitation could allow a local attacker with limited privileges to bypass access controls in the kernel driver, potentially leading to unauthorized access or manipulation of system resources. The vulnerability impacts confidentiality, integrity, and availability at a high level. However, exploitation requires local access and no remote attack vector is indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should restrict local access to trusted users only and monitor for any suspicious activity related to the kernel driver. Avoid running untrusted code locally until a fix is released.