PT-2026-96039

CVE-2026-94142

Published

2026-09-21

Updated

2026-10-21

Description by

CVSS 3.1

8.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BioStar Temperature Monitor Utility version 1.2.1806.2200

Description A write-what-where condition exists in the IOCTL Handler component within the file BS HWMIO64 W10.sys. This issue occurs in the sub 1105C() function when the PhysicalAddress argument is manipulated. Exploitation requires local access to the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Bigcat

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-123: Write-what-where Condition

Related identifiers