This vulnerability affects the kernel driver component bootpt64.sys in Ezbsystems UltraISO Premium Edition versions up to 9.76. It results from improper access controls that can be manipulated by an attacker with local access. The vulnerability has been publicly disclosed, but no official remediation or patch has been provided by the vendor. The CVSS 4.0 base score is 8.5, indicating a high severity with local attack vector, low attack complexity, no user interaction, and high impacts on confidentiality, integrity, and availability.

An attacker with local access can exploit this vulnerability to bypass access controls in the kernel driver, potentially leading to unauthorized access or privilege escalation. The high CVSS score reflects significant potential impact on system confidentiality, integrity, and availability. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should restrict local access to trusted users only and monitor for suspicious activity related to the kernel driver component. Avoid running untrusted code locally until a fix is released.