Is CVE-2026-12782 actively exploited?

No active exploitation of CVE-2026-12782 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-12782 be exploited remotely?

No. CVE-2026-12782 requires local access to exploit.

What is the CVSS score of CVE-2026-12782?

CVE-2026-12782 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2026-12782

HIGH

CVE-2026-12782

CWE-266Published: June 21, 2026· Updated: Jun 23, 2026

7.8

CVSS v3.1

EPSS:0.11%probability of exploitation in 30 daysPercentile:1.5th

Official Description

A security flaw has been discovered in EaseUS Partition Master up to 14.5. The impacted element is an unknown function in the library EUEDKEPM.sys of the component Kernel Driver. The manipulation results in improper access controls. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The affected component should be upgraded. The vendor explains: "We have confirmed that this issue was present only in older versions of the product. Our product has since been updated, and the issue has been resolved in the latest version, so it no longer exists."

NVD Source

Technical Analysis

CVE-2026-12782 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.