CVE-2026-12779: AOMEI Dynamic Disk Manager Kernel Driver ddmdrv.sys access control

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-21 · updated 2026-10-25
Weakness: CWE-266

Description

A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unknown processing in the library ddmdrv.sys of the component Kernel Driver. Performing a manipulation results in improper access controls. The attack must be initiated from a local position. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

AOMEI Dynamic Disk Manager: 10.10.0, 10.10.1

References

https://vuldb.com/cve/CVE-2026-12779
https://vuldb.com/submit/835608
https://vuldb.com/vuln/372520
https://vuldb.com/vuln/372520/cti
https://winslow1984.com/books/cve-collection/page/aomei-dynamic-disk-manager-10101-kernel-driver-ddmdrvsys-local-privilege-escalation

Get alerted when CVE-2026-12779 or the next vulnerability affects your stack