This vulnerability affects PowerISO 9.3.0.0 in the kernel driver located at C:\Windows\System32\drivers\scdemu.sys. It involves improper privilege management that can be exploited by an attacker with local access. The exploit has been publicly disclosed, increasing the risk of exploitation. The vendor was notified but has not issued any response or fix. The CVSS 4.0 base score is 8.5, indicating a high severity with local attack vector, low attack complexity, no user interaction, and high impacts on confidentiality, integrity, and availability.

An attacker with local access can exploit this vulnerability to gain elevated privileges improperly, potentially leading to unauthorized system control or disruption. The high CVSS score reflects significant impact on system confidentiality, integrity, and availability. However, there are no reports of active exploitation in the wild at this time.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded, users should consider restricting local access to trusted users only and monitor for suspicious activity related to PowerISO. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.