Vulnerability · Published Sep 21, 2026 · Assigned by VulDB
CVE-2026-94425Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management
High 8.8
In plain English
A high-severity privilege mismanagement in MTT S80 Driver Package from Moore Threads. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Official description
A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Moore Threads | MTT S80 Driver Package | 340.150 |
Weakness: CWE-269, CWE-266 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:R
References
- VDB-408151 | Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management vdb-entry, technical-description
- VDB-408151 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-94425 | CVE Analysis and Report third-party-advisory
- Submit #894809 | MOORE THREADS MTT S80 driver package v340.150 Incorrect Use of Privileged APIs third-party-advisory