Is CVE-2026-12781 actively exploited?

No active exploitation of CVE-2026-12781 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-12781 be exploited remotely?

No. CVE-2026-12781 requires local access to exploit.

What is the CVSS score of CVE-2026-12781?

CVE-2026-12781 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2026-12781

HIGH

CVE-2026-12781

CWE-266Published: June 21, 2026· Updated: Jun 22, 2026

7.8

CVSS v3.1

EPSS:0.11%probability of exploitation in 30 daysPercentile:1.6th

Official Description

A vulnerability was identified in EaseUS Partition Master up to 14.5. The affected element is an unknown function in the library epmntdrv.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be performed locally. The exploit is publicly available and might be used. You should upgrade the affected component. The vendor explains: "We have confirmed that this issue was present only in older versions of the product. Our product has since been updated, and the issue has been resolved in the latest version, so it no longer exists."

NVD Source

Technical Analysis

CVE-2026-12781 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.