{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3acolorfuligamecenter2.0.0.82/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:colorful:igamecenter:2.0.0.82:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-109520"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["iGameCenter (2.0.0.82)"],"_cs_severities":["high"],"_cs_tags":["privilege-escalation","windows","local-access","vulnerability"],"_cs_type":"advisory","_cs_vendors":["Colorful"],"content_html":"\u003cp\u003eCVE-2026-109520 identifies a critical security vulnerability within Colorful iGameCenter version 2.0.0.82. The flaw resides in the handling of the SystemBuffer argument within the MmMapIoSpace function, which is utilized by the AMDRyzenMasterDriver.sys component. This driver is typically used for low-level hardware interaction and overclocking management. An attacker with local access to the system can exploit this weakness by sending specially crafted IOCTL (Input/Output Control) requests to the driver. Successful exploitation allows a local user to perform unauthorized actions with elevated privileges, potentially leading to full system compromise or persistence. The vendor has not provided a response or a patch to address this disclosure, leaving users of this software version exposed to potential privilege escalation.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of this vulnerability allows an attacker who already has low-privileged local access to escalate their permissions to a higher level, potentially that of the kernel or system user. This level of access grants the attacker the ability to bypass security controls, modify system files, install rootkits, or exfiltrate sensitive data. Since the software is primarily used for hardware control, the scope of impact is local to the affected machine, but the severity is high due to the potential for total control over the host operating system.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eMonitor for the presence of the vulnerable driver file 'AMDRyzenMasterDriver.sys' associated with Colorful iGameCenter 2.0.0.82 in the environment.\u003c/li\u003e\n\u003cli\u003eGiven the lack of a vendor patch, evaluate the necessity of the iGameCenter software on systems and consider removal or isolation for high-risk assets until a security update is released.\u003c/li\u003e\n\u003cli\u003eRestrict local user access to hardware management utilities and drivers to prevent non-administrative users from interacting with high-privileged IOCTL interfaces.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-13T14:37:18Z","date_published":"2026-10-13T14:37:18Z","id":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-109520/","summary":"CVE-2026-109520 is a local privilege escalation vulnerability in Colorful iGameCenter 2.0.0.82 allowing unauthorized actions via manipulated IOCTL requests to the AMDRyzenMasterDriver.sys driver.","title":"Local Privilege Escalation in Colorful iGameCenter","url":"https://feed.craftedsignal.io/briefs/2026-10-cve-2026-109520/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:colorful:igamecenter:2.0.0.82:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}