Exposed IOCTL Function Calls in TcRouter.sys Affecting Local Devices
CVE-2026-18769
8.5HIGH
What is CVE-2026-18769?
A vulnerability in TcRouter.sys allows local low privileged attackers to invoke exposed IOCTL function calls, enabling them to manipulate arbitrary physical memory content. This could lead to severe implications, including unauthorized access and compromise of the device's integrity. It's crucial for organizations to be aware of this threat and implement necessary security measures to protect their systems against potential exploitation.
Affected Version(s)
TcRouter.sys for Windows on x64 <3.1.0.2365 1.0.0 < 3.1.0.2365
TcRouter.sys for Windows on x64 3.1.0.2364 3.1.0.2364
TcRouter.sys for Windows on x86 <3.1.0.2365 1.0.0 < 3.1.0.2365
References
CVSS V4
Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Chi Siang Choo from 4rthur Security Team
Julian Horoszkiewicz
Patrick Saif