Fury Ctrl Rgb Control Software
Monthly
Local privilege escalation in Kingston FURY CTRL RGB Control Software 2.0.65.0 allows a low-privileged local user to gain full system-level access through the NTIOLib_KSFX.sys kernel driver component. The driver's privilege management is improperly implemented (CWE-269), enabling manipulation that elevates attacker control without requiring user interaction or elevated starting privileges. A public proof-of-concept exploit has been released via Google Drive, and the vendor did not respond to disclosure - meaning no patch exists and the exploit is freely usable against unmitigated systems.
Local privilege escalation in Kingston FURY CTRL RGB Control Software 2.0.65.0 allows a low-privileged local user to gain full system-level access through the NTIOLib_KSFX.sys kernel driver component. The driver's privilege management is improperly implemented (CWE-269), enabling manipulation that elevates attacker control without requiring user interaction or elevated starting privileges. A public proof-of-concept exploit has been released via Google Drive, and the vendor did not respond to disclosure - meaning no patch exists and the exploit is freely usable against unmitigated systems.