CVE-2026-129255
Deferred Deferred - Pending Action

Incorrect Default Permissions in CoolerMaster MASTERPLUS+ Device Driver

Publication date: 2026-11-14

Last updated on: 2026-11-14

Assigner: VulDB

Description
A vulnerability was identified in CoolerMaster MASTERPLUS+ 1.9.6. This affects the function sub_11504 in the library WinRing0x64.sys of the component Device Driver. The manipulation of the argument PhysicalAddress leads to incorrect default permissions. The attack can only be performed from a local environment. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-14
Last Modified
2026-11-14
Generated
2026-11-15
AI Q&A
2026-11-14
EPSS Evaluated
N/A
NVD
CVE-2026-129255
EUVD
EUVD-2026-125912

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
CoolerMaster MASTERPLUS+ 1.9.6

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
CWE-276 During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in CoolerMaster MASTERPLUS+ 1.9.6, specifically in the WinRing0x64.sys driver. It involves a function called sub_11504 where manipulating the PhysicalAddress argument leads to incorrect default permissions. The attack requires local access to the system.

Detection Guidance

This vulnerability affects the CoolerMaster MASTERPLUS+ software via the WinRing0x64.sys driver. Detection requires checking for the presence of this driver and verifying its permissions. Inspect the driver file in the system's driver directory (e.g., C:\Windows\System32\drivers\WinRing0x64.sys) and review its access control settings.

Impact Analysis

An attacker with local access could exploit this to gain elevated privileges or execute arbitrary code on the affected system. This could allow unauthorized control over the device, data theft, or system compromise.

Compliance Impact

This vulnerability does not provide sufficient information to assess its direct impact on compliance with GDPR, HIPAA, or other standards. The issue involves incorrect default permissions in a device driver, which could potentially lead to unauthorized access or privilege escalation. However, specific compliance implications depend on system configurations and data handling practices not described in the CVE.

Mitigation Strategies

Immediately uninstall or disable the CoolerMaster MASTERPLUS+ software to remove the vulnerable driver. Ensure the WinRing0x64.sys driver is deleted from the system. Apply least-privilege principles by restricting access to system drivers and monitoring for unauthorized modifications.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-129255. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...