CVE-2026-94403 | ColorFul iGameCenter 1.0.3.4 IOCTL ene.sys sub_140001AF0 untrusted pointer dereference

September 21, 2026 Yanac

A vulnerability identified as critical has been detected in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference.

The identification of this vulnerability is CVE-2026-94403. The attack can only be executed locally. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More