CVE-2026-82807

Ultra RAMDisk Pro 1.82 ships a Windows kernel driver, URDSCSI.sys, that suffers from improper privilege management (CWE-266/CWE-269). A local attacker with only low privileges can trigger the flaw to gain elevated privileges on the host, with high impact to the system's confidentiality, integrity and availability. Any Windows machine running the affected Ultra RAMDisk Pro driver is exposed once an untrusted local user can execute code, since no user interaction is required. The advisory states the exploit has been publicly disclosed and may be used, although no standalone proof-of-concept has been catalogued; the issue is not in CISA KEV and EPSS estimates about a 0.1% chance of exploitation within 30 days. The vendor was contacted before disclosure but did not respond, and no patched version has been announced.

What to do: No fixed version has been announced, so check local Windows hosts for the presence of the Ultra RAMDisk Pro URDSCSI.sys driver and consider removing or disabling the product until the vendor issues an update. Restrict untrusted local users on systems where the driver is loaded, and monitor ieungSoft for a patch or vendor response.