This vulnerability affects Kingston FURY CTRL RGB Control Software version 2.0.65.0, specifically an unknown function in the NTIOLib_KSFX.sys driver. Improper privilege management allows a local attacker to potentially escalate privileges or perform unauthorized actions. The exploit has been publicly released, increasing the risk of exploitation. No official remediation or patch has been provided by the vendor, and the vulnerability was disclosed without vendor response.

The vulnerability allows a local attacker to manipulate the driver component leading to improper privilege management, which can result in elevated privileges or unauthorized system control. The CVSS 4.0 base score of 8.5 indicates high severity with low attack complexity and no user interaction required. However, exploitation requires local access, limiting remote attack vectors.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should restrict local access to trusted users only and monitor for suspicious activity related to the affected software until an official patch is available.