Local Privilege Escalation in TcRouter.sys Affects Multiple Devices
CVE-2026-18768
8.5HIGH
What is CVE-2026-18768?
A vulnerability exists within TcRouter.sys that allows a local low-privileged attacker to exploit exposed IOCTL function calls. This can lead to unauthorized access to arbitrary physical memory or the ability to define its mapping, ultimately compromising the affected devices.
Affected Version(s)
TcRouter.sys for Windows on x64 <3.1.0.2365 1.0.0 < 3.1.0.2365
TcRouter.sys for Windows on x64 3.1.0.2364 3.1.0.2364
TcRouter.sys for Windows on x86 <3.1.0.2365 1.0.0 < 3.1.0.2365
References
CVSS V4
Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Chi Siang Choo from 4rthur Security Team
Julian Horoszkiewicz
Patrick Saif