Memory Corruption Vulnerability in Horizon DataSys Reboot Restore Standard Kernel Driver
CVE-2026-120232

9.3CRITICAL

Key Information:

Vendor

Horizon Datasys

Status
Reboot Restore Standard
Vendor
CVE Published:
1 November 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-120232?

A vulnerability has been detected in Horizon DataSys Reboot Restore Standard versions up to 13.2, specifically within the function sub_23908 of the kernel driver shield.sys. This flaw leads to memory corruption, which can be exploited locally by an attacker. Publicly available exploit techniques could pose significant risks if not addressed. A forthcoming release is expected to provide a patch for this issue, highlighting the urgency for users to remain vigilant and update their systems promptly.

Affected Version(s)

Reboot Restore Standard 13.0

Reboot Restore Standard 13.1

Reboot Restore Standard 13.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-120232 - Proof of Concept

References

https://vuldb.com/vuln/429591
vdb-entrytechnical-description
https://vuldb.com/vuln/429591/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-120232
third-party-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Element2023H (VulDB User)
VulDB CNA Team
.