This vulnerability affects StableBit Scanner 2.6.13.4088, specifically the Scanner.Service.exe component. It involves permission issues that can be exploited by a local attacker with low privileges to cause significant impact on the system's confidentiality, integrity, and availability. The attack does not require user interaction and has low attack complexity. Although exploit code is publicly available, there are no known active exploits in the wild. The vendor has not yet provided an official fix or remediation guidance.

The vulnerability allows a local attacker with limited privileges to manipulate permissions in the ScannerService component, potentially leading to unauthorized access or control over the affected system. The CVSS 4.0 score of 8.5 reflects high impact on confidentiality, integrity, and availability. However, exploitation is limited to local access, and no remote exploitation is possible.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to the ScannerService component.