Improper Privilege Management in Yungengxin Yun Jia Security Guard
CVE-2026-108835

4.8MEDIUM

Key Information:

Vendor

Yungengxin

Status
Yun Jia Security Guard
Vendor
CVE Published:
12 October 2026

What is CVE-2026-108835?

A vulnerability has been identified in Yungengxin Yun Jia Security Guard affecting version up to 2.7.1.9. This flaw resides in the function sub_14000885C within the kgameprotect.sys library, where improper handling of the argument Pid can result in unauthorized privilege management. Attackers with local access can exploit this vulnerability, potentially leading to unauthorized actions. Despite an early disclosure to the vendor, there has been no response regarding remediation efforts. Users are advised to take necessary precautions to mitigate risks associated with this vulnerability.

Affected Version(s)

Yun Jia Security Guard 2.7.1.0

Yun Jia Security Guard 2.7.1.1

Yun Jia Security Guard 2.7.1.2

References

https://vuldb.com/vuln/416609
vdb-entrytechnical-description
https://vuldb.com/vuln/416609/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-108835
third-party-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Element2023H (VulDB User)
VulDB CNA Team
.