CVE-2026-120232— Horizon DataSys Reboot Restore Standard Kernel Driver shield.sys sub_23908 memory corruption

Quick assessment

Affected

Horizon DataSys Reboot Restore Standard

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Horizon DataSys Reboot Restore Standard 13.2 及以下版本中发现了一个漏洞。受影响的组件是内核驱动程序（Kernel Driver）中 shield.sys 库里的 sub_23908 函数。该漏洞可导致内存损坏。攻击仅限于本地环境发起。利用该漏洞的公开利用代码（exploit）已存在，可能被恶意使用。修复方案计划在下一次版本更新中提供。

CVSS 8.8 · High EPSS 0.23% · P14 Updated Nov 02, 2026

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 3

Vendor	Product	Version Range	Status
Horizon DataSys	Reboot Restore Standard	`13.0`	affected
		`13.1`	affected
		`13.2`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Horizon DataSys Reboot Restore Standard Kernel Driver shield.sys sub_23908 memory corruption

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack can only be performed from a local environment. The exploit is publicly available and might be used. A fix is planned for the upcoming release.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

内存缓冲区边界内操作的限制不恰当

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Horizon DataSys	Reboot Restore Standard	13.0	`cpe:2.3:a:horizon_datasys:reboot_restore_standard::::::::`

II. Public POCs for CVE-2026-120232

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-120232

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-120232 (1)

CVE-2026-120232 | Horizon DataSys Reboot Restore Standard up to 13.2 Kernel Driver shield.sys sub_23908 memory corruption vdb-entry technical-description

Other References for CVE-2026-120232 (4)

https://gist.github.com/Element2023H/a176865b1f4015e003620154f3ba103c exploit
https://vuldb.com/cve/CVE-2026-120232 third-party-advisory
https://vuldb.com/vuln/429591/cti signature permissions-required
https://vuldb.com/submit/1001497 third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-120232

IV. Related Vulnerabilities

Same weakness: CWE-119