CVE-2026-82628

Colorful iGameCenter 2.0.0.81 ships a kernel driver, WinRing0x64.sys, whose IOCTL Dispatch handler (function sub_11504) fails to properly validate caller-supplied arguments — PhysicalAddress, AlignNumer and AlignSize — resulting in improper privilege management (CWE-266/CWE-269). A local, low-privileged attacker who can execute code on the machine and send crafted IOCTLs to the driver can manipulate these values to gain elevated access, most plausibly by mapping or writing arbitrary physical memory and escalating to SYSTEM/kernel privileges. Successful exploitation yields full control of the affected system, consistent with the critical CVSS 4.0 score of 9.3 and high impact on confidentiality, integrity and availability. Affected users are Windows owners of Colorful graphics cards running the iGameCenter tuning/monitoring utility (version 2.0.0.81 confirmed; other version ranges are not specified in the disclosure). No public proof-of-concept, CISA KEV listing, or in-the-wild exploitation is currently known, and EPSS estimates only a ~0.1% probability of exploitation within 30 days.

What to do: Upgrade iGameCenter as soon as Colorful publishes a fixed build — no patched version is identified in the disclosure, so check the vendor's download/support pages for anything newer than 2.0.0.81. As an interim mitigation, uninstall or stop the utility and confirm the bundled WinRing0x64.sys driver is not loaded, prioritizing shared or multi-user Windows machines where any low-privileged local user could exploit the driver. Note that many other utilities ship their own copies of WinRing0x64.sys, which should be tracked and assessed separately.