Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2026-108835— Yungengxin Yun Jia Security Guard kgameprotect.sys sub_14000885C privileges management

Quick assessment

Affected
Yungengxin Yun Jia Security Guard
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在Yungengxin Yun Jia Security Guard(版本高达2.7.1.9)中发现了一个安全漏洞。该漏洞影响库文件 kgameprotect.sys 中的 sub_14000885C 函数。通过操纵参数 Pid,可能导致权限管理不当。此攻击需要本地访问权限。供应商已就该披露事项在早期被联系,但至今未作出任何回应。

CVSS 4.4 · Medium

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 10

VendorProduct Version RangeStatus
Yungengxin Yun Jia Security Guard 2.7.1.0 affected
2.7.1.1 affected
2.7.1.2 affected
2.7.1.3 affected
2.7.1.4 affected
2.7.1.5 affected
2.7.1.6 affected
2.7.1.7 affected
… +2 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-108835

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Yungengxin Yun Jia Security Guard kgameprotect.sys sub_14000885C privileges management
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the library kgameprotect.sys. Executing a manipulation of the argument Pid can lead to improper privilege management. The attack requires local access. The vendor was contacted early about this disclosure but did not respond in any way.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
特权管理不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Yungengxin Yun Jia Security Guard 2.7.1.0 cpe:2.3:a:yungengxin:yun_jia_security_guard:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-108835

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-108835

请登录查看更多情报信息。

IV. Related Vulnerabilities

V. Comments for CVE-2026-108835

No comments yet


Leave a comment