What’s Vulnerable › Vulnerabilities

CVE-2026-29923

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-09 · updated 2026-06-17
• Weakness: CWE-269

Description

The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged users to map arbitrary physical memory into their address space and modify critical kernel structures.

References

• https://entechtaiwan.com/util/ps.shtm
• https://packetstorm.news/files/id/218394/
• https://packetstorm.news/files/id/218394/

Get alerted when CVE-2026-29923 or the next vulnerability affects your stack