CVE-2026-108835

4.4Medium

Published 12 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

4.4Medium

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Limited impact
Weakness: CWE-266, CWE-269

Impact

A local attacker with an account can cause improper privilege management or service disruption. They need existing local access to manipulate process arguments sent to the driver.

Root cause

Improper privilege management occurs when processing the Pid argument in the sub_14000885C function of kgameprotect.sys.

Affected systems

Yungengxin Yun Jia Security Guard up to 2.7.1.9

CVSS v3.1 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Fix & remediation

No fixed version is currently available as the vendor has not responded. Disable or stop the kgameprotect.sys driver service and restrict local access on affected Windows hosts.

shell

$ sc query kgameprotect

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the library kgameprotect.sys. Executing a manipulation of the argument Pid can lead to improper privilege management. The attack requires local access. The vendor was contacted early about this disclosure but did not respond in any way.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-108835