The pstrip64.sys driver in EnTech Taiwan PowerStrip versions <= 3.90.736 contains a local privilege escalation vulnerability. The issue arises from improper handling of IOCTL requests, which allows unprivileged users to map arbitrary physical memory into their process space. This capability can be leveraged to modify kernel memory structures, resulting in escalation of privileges to SYSTEM level. The vulnerability was published on April 9, 2026, but no CVSS score or official remediation information is provided.

Successful exploitation allows a local attacker to gain SYSTEM-level privileges on affected systems by manipulating kernel memory. This could lead to full control over the compromised machine, bypassing normal security restrictions. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local user access to systems running vulnerable versions of PowerStrip and monitor for suspicious local activity related to IOCTL calls targeting pstrip64.sys.