This vulnerability affects the kernel driver component bootpt64.sys in Ezbsystems UltraISO Premium Edition versions up to 9.76. It results from improper access controls that could be manipulated by an attacker with local access. The CVSS 4.0 base score is 8.5, indicating high severity, with low attack complexity and no user interaction required. The vulnerability impacts confidentiality, integrity, and availability with high impact. The vendor has not provided any remediation or patch, and the exploit has been publicly disclosed.

An attacker with local access can exploit improper access controls in the kernel driver to potentially compromise system confidentiality, integrity, and availability. The high CVSS score reflects significant risk if exploited. However, there is no indication of known exploits in the wild at this time.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded and no fixes are published, users should restrict local access to trusted users only and monitor for any updates from the vendor. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.