CVE-2026-58583: CWE-269 Improper Privilege Management in FluxInk Color Management Driver
FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical memory mapping at \Device\PhysicalMemory. Fixed in version 1.0.7.6. The fixed driver is currently available in the Windows 11 25H2 HLK (Hardware Lab Kit). The fixed driver may be available through Windows Update or from Lenovo directly.
AI Analysis
Technical Summary
The FluxInk Color Management Driver (TcnPeripheral64.sys) versions prior to 1.0.7.6 contain an improper privilege management vulnerability (CWE-269) that permits local users with standard accounts to escalate privileges by mapping arbitrary physical memory through the \Device\PhysicalMemory interface. This vulnerability enables unauthorized access to high-integrity system resources. The flaw is resolved in version 1.0.7.6, which is distributed in the Windows 11 25H2 Hardware Lab Kit and may be available through Windows Update or directly from Lenovo.
Potential Impact
Successful exploitation allows a local standard user to escalate privileges to higher levels, potentially gaining full control over the affected system. The vulnerability impacts confidentiality and integrity by granting unauthorized access to physical memory, but does not affect availability. There are no known exploits in the wild at this time.
Mitigation Recommendations
A fix is available in FluxInk Color Management Driver version 1.0.7.6. Users and administrators should update to this version as soon as possible. The fixed driver is included in the Windows 11 25H2 Hardware Lab Kit and may be obtained via Windows Update or directly from Lenovo. Patch status beyond this is not explicitly stated; verify with vendor advisories for the latest remediation guidance.
CVE-2026-58583: CWE-269 Improper Privilege Management in FluxInk Color Management Driver
Description
FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical memory mapping at \Device\PhysicalMemory. Fixed in version 1.0.7.6. The fixed driver is currently available in the Windows 11 25H2 HLK (Hardware Lab Kit). The fixed driver may be available through Windows Update or from Lenovo directly.
CVSS v3.1
Score 7.1high
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The FluxInk Color Management Driver (TcnPeripheral64.sys) versions prior to 1.0.7.6 contain an improper privilege management vulnerability (CWE-269) that permits local users with standard accounts to escalate privileges by mapping arbitrary physical memory through the \Device\PhysicalMemory interface. This vulnerability enables unauthorized access to high-integrity system resources. The flaw is resolved in version 1.0.7.6, which is distributed in the Windows 11 25H2 Hardware Lab Kit and may be available through Windows Update or directly from Lenovo.
Potential Impact
Successful exploitation allows a local standard user to escalate privileges to higher levels, potentially gaining full control over the affected system. The vulnerability impacts confidentiality and integrity by granting unauthorized access to physical memory, but does not affect availability. There are no known exploits in the wild at this time.
Mitigation Recommendations
A fix is available in FluxInk Color Management Driver version 1.0.7.6. Users and administrators should update to this version as soon as possible. The fixed driver is included in the Windows 11 25H2 Hardware Lab Kit and may be obtained via Windows Update or directly from Lenovo. Patch status beyond this is not explicitly stated; verify with vendor advisories for the latest remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- cisa-cg
- Date Reserved
- 2026-07-01T15:47:30.055Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a4d6893c9d9e3dbe3d5458a
Added to database: 07/07/2026, 20:58:59 UTC
Last enriched: 07/21/2026, 20:11:00 UTC
Last updated: 08/20/2026, 22:52:13 UTC
Views: 173
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.