PT-2026-51189 · Aomei · Dynamic Disk Manager

Winslow1984 · Published 2026-06-20 · Updated 2026-06-21 · CVE-2026-12779

NVD

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

A vulnerability was found in AOMEI Dynamic Disk Manager up to 10.10.1. This issue affects some unknown processing in the library ddmdrv.sys of the component Kernel Driver. Performing a manipulation results in improper access controls. The attack must be initiated from a local position. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

Incorrect Privilege Assignment

Improper Access Control

Weakness Enumeration

CWE-266

CWE-284

Related Identifiers

CVE-2026-12779

Affected Products

Dynamic Disk Manager

References · 7

• 🔥 https://winslow1984.com/books/cve-collection/page/aomei-dynamic-disk-manager-10101-kernel-driver-ddmdrvsys-local-privilege-escalation · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-12779 · Security Note
• https://twitter.com/senzee1984/status/2068475267102752988 · Twitter Post
• https://vuldb.com/submit/835608 · Note
• https://vuldb.com/vuln/372520 · Note
• https://vuldb.com/vuln/372520/cti · Note
• https://vuldb.com/cve/CVE-2026-12779 · Note