This vulnerability affects Kingston FURY CTRL RGB Control Software 2.0.65.0, specifically an unknown function in the NTIOLib_KSFX.sys driver. Improper privilege management allows a local attacker with limited privileges to potentially escalate privileges or perform unauthorized actions. The vulnerability has a CVSS 4.0 base score of 8.5, indicating high severity. Exploit code is publicly available, increasing the risk of exploitation. The vendor has not issued any advisory or patch, and remediation status is unknown.

A local attacker with limited privileges can exploit this vulnerability to gain higher privileges or perform unauthorized operations on the affected system. The presence of public exploit code increases the likelihood of exploitation. No cloud service is involved, so the impact is limited to local installations of the affected software version.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should consider limiting local access to trusted users only and monitor for suspicious activity related to the affected software until an official fix is released.