CVE-2026-94425

Received Received - Intake

Privilege Escalation in Moore Threads MTT S80 Driver

Publication date: 2026-09-21

Last updated on: 2026-09-21

Assigner: VulDB

Description

A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-21

Last Modified

2026-09-21

Generated

2026-09-22

AI Q&A

2026-09-22

EPSS Evaluated

N/A

NVD

CVE-2026-94425

EUVD

EUVD-2026-84244

Affected Vendors & Products

Vendor	Product	Version / Range
moore_threads	mtt_s80_driver_package	340.150

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-266	A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This is a local privilege escalation vulnerability in Moore Threads MTT S80 Driver Package 340.150. The flaw exists in the IOCTL handler function sub_140006F0C within the mtdispkm64.sys driver. An attacker can exploit this to gain elevated privileges on the system by manipulating the driver's input/output control operations.

Detection Guidance

This vulnerability requires local access and involves the mtdispkm64.sys driver in the Moore Threads MTT S80 Driver Package. Detection may involve checking for the presence of this driver and analyzing its IOCTL handler for improper privilege management. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability allows an attacker with local access to gain higher privileges, potentially leading to full system compromise. This could enable unauthorized data access, installation of malware, or complete control over the affected system.

Compliance Impact

This vulnerability involves improper privilege management in the Moore Threads MTT S80 Driver Package, allowing local attackers to escalate privileges. While not directly tied to GDPR or HIPAA, such vulnerabilities can undermine compliance by enabling unauthorized access to sensitive data, potentially violating confidentiality requirements in these regulations.

Mitigation Strategies

Immediate steps include updating or removing the Moore Threads MTT S80 Driver Package to the latest version, restricting local access to untrusted users, and monitoring for suspicious activity related to the mtdispkm64.sys driver. Since the vendor did not respond, consider alternative driver solutions or disabling the component if not essential.

Hi! I’m here to help you understand CVE-2026-94425. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70