Live › vulnerability › CVE-2026-120232
Horizon DataSys Reboot Restore Standard up to version 13.2 has a memory corruption flaw in the function sub_23908 of its kernel driver library shield.sys. A local user who can run code on the machine may be able to corrupt kernel memory, and a public exploit is said to exist.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-01 15:20 UTC. All times on this page are UTC.
Machines running Horizon DataSys Reboot Restore Standard up to version 13.2, where the kernel driver shield.sys is loaded. The sources say the attack needs a local environment, so machines with no local user access are less exposed. Teams without this product can skip it.
No product ranges from the sources yet.
13.2 are affected.shield.sys on Windows machines running the product.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack can only be performed from a local environment. The exploit is publicly available and might be used. A fix is planned for the upcoming release.
This page as .md · .json · in your agent: get_signal("CVE-2026-120232")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.