CVE-2026-57851

Name of the Vulnerable Software and Affected Versions MSI Feature Manager (affected versions not specified)

Description A local privilege escalation issue exists in the KernCoreLib64.sys kernel driver. A locally logged-on user can perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL (Input/Output Control) handlers without administrator privileges. This allows attackers to manipulate kernel objects, tamper with kernel-mode callbacks, bypass Protected Process Light (PPL) protections, and disable security software.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.