This vulnerability affects Mullvad wireguard.sys version 0.10.1 and is caused by improper updating of a reference count within the AdapterState function of the IOCTL Handler component. The flaw requires local access with high privileges to exploit and does not involve user interaction or network attack vectors. The improper reference count update could potentially lead to resource management issues. Public exploit code exists, but there is no indication of active exploitation in the wild. The vendor was contacted early, but no remediation level or patch information is currently available.

The vulnerability allows an attacker with local high privileges to manipulate internal reference counts improperly, which could lead to resource mismanagement or instability in the affected component. The CVSS score of 4.6 reflects a medium severity impact with limited attack vector and privileges required. There is no evidence of remote exploitation or user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation has been published, users should monitor Mullvad's advisories for updates. Restricting local access to trusted users and limiting high privilege accounts may reduce exposure until a patch is available.