CVE-2026-82628: Improper Privilege Management in Colorful iGameCenter
Description
CVE-2026-82628 is a critical vulnerability in Colorful iGameCenter version 2.0.0.81. It involves improper privilege management due to manipulation of arguments in the WinRing0x64.sys driver component, specifically in the IOCTL Dispatch function sub_11504. Exploitation requires local access to the system.
CVSS v4.0
Score 9.3critical
Affected software
Colorful
iGameCenter
cpe:2.3:a:colorful:igamecenter:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects the function sub_11504 in the WinRing0x64.sys driver of Colorful iGameCenter 2.0.0.81. By manipulating the PhysicalAddress, AlignNumer, or AlignSize arguments, an attacker with local access can trigger improper privilege management, potentially leading to privilege escalation. The vulnerability has a high CVSS 4.0 score of 9.3, indicating critical severity. No official patch or remediation information is currently available.
Potential Impact
An attacker with local access can exploit this vulnerability to gain elevated privileges on the affected system, potentially compromising system integrity and security. The vulnerability affects a kernel-mode driver component, which increases the risk of serious impact if exploited.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict local access to trusted users only and monitor for suspicious activity related to the WinRing0x64.sys driver.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-08-30T09:59:30.384Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a95283dacd9273b49b64cb9
Added to database: 08/31/2026, 07:07:41 UTC
Last enriched: 09/07/2026, 15:50:48 UTC
Last updated: 10/15/2026, 18:48:24 UTC
Views: 113
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.