CVE-2026-108835: Yungengxin Yun Jia Security Guard kgameprotect.sys sub_14000885C privileges management

Severity: medium (CVSS 4.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-12 · updated 2026-10-15
Weakness: CWE-266

Description

A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the library kgameprotect.sys. Executing a manipulation of the argument Pid can lead to improper privilege management. The attack requires local access. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Yungengxin Yun Jia Security Guard: 2.7.1.0, 2.7.1.1, 2.7.1.2, 2.7.1.3, 2.7.1.4, 2.7.1.5 (+4)

References

https://vuldb.com/cve/CVE-2026-108835
https://vuldb.com/submit/972608
https://vuldb.com/vuln/416609
https://vuldb.com/vuln/416609/cti

Get alerted when CVE-2026-108835 or the next vulnerability affects your stack