CVE-2026-129255 | CoolerMaster MASTERPLUS+ 1.9.6 Device Driver WinRing0x64.sys sub_11504 PhysicalAddress default permission

November 13, 2026 Yanac

A vulnerability identified as very critical has been detected in CoolerMaster MASTERPLUS+ 1.9.6. This affects the function sub_11504 in the library WinRing0x64.sys of the component Device Driver. The manipulation of the argument PhysicalAddress leads to incorrect default permissions.

This vulnerability is referenced as CVE-2026-129255. The attack can only be performed from a local environment. No exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More