This vulnerability affects the MessageNotifyCallback function in the ProtectFilter64.sys library of Chengdu Qilu Technology Ludashi 6.1026.4715.714. A manipulation leads to missing authorization, allowing an attacker with local access and high privileges to potentially perform unauthorized actions. The vulnerability has a CVSS 4.6 (medium) score, indicating moderate impact. The vendor was contacted but did not respond, and no patch or mitigation guidance is currently available. Public exploit code has been released, increasing the risk of exploitation.

The vulnerability allows an attacker with local and high privilege access to bypass authorization checks in the affected function. This could lead to unauthorized actions within the application context. However, exploitation requires local access and elevated privileges, limiting the attack surface. No known active exploitation in the wild has been reported.

No official patch or remediation is currently available from the vendor. Since exploitation requires local high privilege access, restricting user privileges and limiting local access can reduce risk. Monitor for updates from the vendor for any forthcoming fixes. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.