ColorFul iGameCenter CVE-2026-94403

Exploitation requires the ColorFul iGameCenter 1.0.3.4 software (and its bundled ENE kernel driver ene.sys) to be installed on a Windows host, plus local low-privileged access to the machine (PR:L, AV:L) so the attacker can open the driver's device object and issue the IOCTL to handler sub_140001AF0. No user interaction and no network access are involved. Limiting factors: the attack cannot be performed remotely, it depends on the vulnerable driver being present and loaded, and it presupposes the attacker already has some local execution context; there is no vendor patch, so mitigation currently relies on removing the software/driver or blocking the vulnerable ene.sys via driver blocklists.

Signals are mostly consistent and point to a genuine but access-limited local privilege-escalation/kernel-corruption issue, not a remotely-mass-exploitable one. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N with VC:H/VI:H/VA:H and subsequent-system SC:H/SI:H/SA:H) correctly captures a locally-authenticated attacker achieving high confidentiality, integrity, and availability impact - consistent with an untrusted pointer dereference (CWE-822) in a signed kernel driver (ene.sys) reachable via an IOCTL handler, i.e. a driver-abuse/BYOVD kernel EoP primitive. Exploit maturity is E:P (proof-of-concept), and the input confirms a public exploit exists, so treat exploitation status as 'publicly available exploit code exists' - NOT active exploitation, since there is no KEV listing and no EPSS score is provided. There is a clear labeling conflict: the input Tags say 'Information Disclosure,' but the mechanism (untrusted pointer dereference in a kernel IOCTL handler with full VC/VI/VA + subsequent-system impact) is memory corruption / privilege escalation, not mere info disclosure - do not treat this as read-only. The single-source reporting (VulDB only) and unresponsive vendor with no patch are the main uncertainty drivers. Net: real priority ONLY for hosts where this specific gaming/RGB utility is installed and where local code execution by a low-privileged user is part of the threat model; low real-world priority elsewhere because it is local-only, niche, and not KEV-listed.

A low-privileged local user (or malware already running as a standard user) on a Windows machine where ColorFul iGameCenter 1.0.3.4 is installed opens a handle to the ene.sys device and sends a crafted IOCTL to handler sub_140001AF0, supplying an attacker-controlled pointer that the driver dereferences in kernel context. This yields kernel memory corruption / arbitrary pointer dereference that can be leveraged for SYSTEM-level privilege escalation or a bugcheck DoS. A public proof-of-concept exploit is available (VulDB, exploit maturity E:P), lowering the practical barrier to weaponization.