CVE-2026-12778: AOMEI Partition Assistant Kernel Driver ampa10.sys access control

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-21 · updated 2026-10-25
Weakness: CWE-266

Description

A vulnerability has been found in AOMEI Partition Assistant up to 10.10.1. This vulnerability affects unknown code in the library ampa10.sys of the component Kernel Driver. Such manipulation leads to improper access controls. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

AOMEI Partition Assistant: 10.10.0, 10.10.1

References

https://vuldb.com/cve/CVE-2026-12778
https://vuldb.com/submit/835607
https://vuldb.com/vuln/372519
https://vuldb.com/vuln/372519/cti
https://winslow1984.com/books/cve-collection/page/aomei-partition-assistant-10101-kernel-driver-ampa10sys-local-privilege-escalation

Get alerted when CVE-2026-12778 or the next vulnerability affects your stack