PT-2026-51194 · Ez Systems · Ultraiso Premium Edition

Winslow1984 · Published 2026-06-20 · Updated 2026-06-21 · CVE-2026-12786

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

CVE-2026-12786

Affected Products

Ultraiso Premium Edition

References · 7

• 🔥 https://winslow1984.com/books/cve-collection/page/ultraiso-premium-976-kernel-driver-bootpt64sys-local-privilege-escalation · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-12786 · Security Note
• https://vuldb.com/cve/CVE-2026-12786 · Note
• https://vuldb.com/vuln/372528/cti · Note
• https://vuldb.com/vuln/372528 · Note
• https://twitter.com/senzee1984/status/2068475267102752988 · Twitter Post
• https://vuldb.com/submit/835614 · Note