This vulnerability affects Jiangmin Antivirus version 21 and is located in the MessageNotifyCallback function of the kvcore.sys library, part of the Minifilter Port component. Improper access controls can be manipulated by a local attacker to potentially escalate privileges or perform unauthorized actions. The vulnerability has a CVSS 4.0 base score of 8.5, indicating high severity. Exploit code has been published, but there is no indication of widespread exploitation. The vendor has not issued any response or remediation guidance.

A local attacker with limited privileges can exploit this vulnerability to bypass access controls, potentially leading to unauthorized actions or privilege escalation within the affected system. The high CVSS score reflects the significant impact on confidentiality, integrity, and availability if exploited.

No official patch or remediation is currently available from the vendor. Users should restrict local access to trusted personnel only and monitor for suspicious activity related to the vulnerable component. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.