Vulnerability · Published Sep 21, 2026 · Assigned by VulDB
CVE-2026-94137Hangzhou Shunwang Technology shzh IRP_MJ_DEVICE_CONTROL shdrv_x64.sys sub_180004AC0 denial of service
Low 3.3
In plain English
A low-severity security flaw in shzh from Hangzhou Shunwang Technology. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 3.1)3.3Low
Exploit odds (30 days)0.2%top 94.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693. This affects the function sub_180004AC0 of the file shdrv_x64.sys of the component IRP_MJ_DEVICE_CONTROL Handler. The manipulation of the argument PID leads to denial of service. The attack must be carried out locally.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hangzhou Shunwang Technology | shzh | 10.7.2.693 |
Weakness: CWE-404 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R
References
- VDB-408054 | Hangzhou Shunwang Technology shzh IRP_MJ_DEVICE_CONTROL shdrv_x64.sys sub_180004AC0 denial of service vdb-entry, technical-description
- VDB-408054 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- CVE-2026-94137 | CVE Analysis and Report third-party-advisory
- Submit #893882 | Hangzhou Shunwang Technology Co., Ltd. shzh 10.7.2.693 Incorrect Default Permissions third-party-advisory
- https://www.virustotal.com/gui/file/e3b99f727e59aab08862a161df7e3d7790842a76c42184fb4ba267db14eae4fa related