CVE-2026-12782Disclosure

MEDIUMCVSS 7.1 · HIGH

Exploit discussion active in current signal (2 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is an unknown function in the library EUEDKEPM.sys of the component Kernel Driver. The manipulation results in improper access controls. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The affected component should be upgraded. The vendor explains: "We have confirmed that this issue was present only in older versions of the product. Our product has since been updated, and the issue has been resolved in the latest version, so it no longer exists."

4.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-266CWE-284

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 4 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 2 signals
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Peaked at 2 mentions on most recent observed day (2026-06-22)
  • 4 total mentions across 3 days

Deep dive

Activity timeline4 mentions / 3d
01122Mentions · 2026-06-20: 1Mentions · 2026-06-21: 1Mentions · 2026-06-22: 2PoC Mentioned / Linked · 2026-06-22: 2Exploit Tool / Code · 2026-06-22: 1Patch / Workaround · 2026-06-22: 1Technical Details · 2026-06-20: 1Technical Details · 2026-06-21: 1Technical Details · 2026-06-22: 106-2006-2106-22
Signal classification2 categories
Disclosure
250.0%
PoC
250.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-201
Disclosure1
2026-06-211
Disclosure1
2026-06-222
PoC2
Full discourse4 posts
  • Winslow@senzee1984
    Disclosure

    Utilized LLM and discovered kernel drivers' vulnerabilities, 8 of them are already credited, all of them are LPE vulnerabilities: CVE-2026-12217, CVE-2026-12778, CVE-2026-12779, CVE-2026-12780, CVE-2026-12781, CVE-2026-12782, CVE-2026-12784, CVE-2026-12786

    Post summary

    The post announces the discovery of eight kernel‑driver local privilege escalation vulnerabilities (CVE‑2026‑12217, CVE‑2026‑12778…CVE‑2026‑12786) discovered via LLM analysis.

    140843911.5K
    1.8K followersView on X
  • CSIRT Italia@csirt_it
    PoC

    ‼ #EaseUS: #PoC per lo sfruttamento delle CVE-2026-12782 e CVE-2026-12781 nel prodotto #PartitionMaster Rischio: 🟡 Tipologia 🔸 Elevation of Privilege 🔗 https://www.acn.gov.it/portale/w/easeus-poc-pubblici-per-il-prodotto-partition-master 🔄 Aggiornamenti disponibili 🔄 https://t.co/Pjqg36zUsq

    Post summary

    A Proof of Concept for Elevation of Privilege vulnerabilities CVE‑2026‑12782 and CVE‑2026‑12781 in EaseUS PartitionMaster has been published, and updates/patches are reportedly available.

    00020480
    9.0K followersView on X
  • Hephaestvs@Vulcanux_
    PoC

    csirt_it: ‼ #EaseUS: #PoC per lo sfruttamento delle CVE-2026-12782 e CVE-2026-12781 nel prodotto #PartitionMaster Rischio: 🟡 Tipologia 🔸 Elevation of Privilege 🔗 https://www.acn.gov.it/portale/w/easeus-poc-pubblici-per-il-prodotto-partition-master 🔄 Aggiornamenti disponibili 🔄 https://t.co/toint2krcl

    Post summary

    The tweet announces the existence of proof‑of‑concept tools for CVE‑2026‑12782 and CVE‑2026‑12781 against EaseUS PartitionMaster, indicating a privilege‑escalation vulnerability.

    0000051
    620 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-12782 Improper Access Control in EaseUS Partition Master Kernel Driver ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12782 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    A new vulnerability (CVE-2026-12782) involving improper access control in the EaseUS Partition Master Kernel Driver has been disclosed, with a link to a community alert for more details.

    0000070
    4.1K followersView on X

Explore more