COOLERMASTER MASTERPLUS+ · CVE-2026-129255 · Other
NO FIX YET · SEE WHAT TO DO
A device driver (WinRing0x64.sys) bundled with CoolerMaster MASTERPLUS+ 1.9.6 sets incorrect default permissions when handling a PhysicalAddress argument. A local user can use this to reach hardware-level memory access that should be restricted.
first public Nov 14, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Windows PCs running CoolerMaster MASTERPLUS+ 1.9.6 with its bundled WinRing0x64.sys driver. A local user with a low-privilege account can abuse the driver's PhysicalAddress handling, so shared or multi-user machines and machines where malware could run as a normal user matter most. Single-user machines without MASTERPLUS+ can skip it. Other MASTERPLUS+ versions are not confirmed either way.
Not affected if no-local-access, product-not-installed
Who cares byovd, coolermaster, driver, local-privilege-escalation, masterplus, windows
A vulnerability was identified in CoolerMaster MASTERPLUS+ 1.9.6. This affects the function sub_11504 in the library WinRing0x64.sys of the component Device Driver. The manipulation of the argument PhysicalAddress leads to incorrect default permissions. The attack can only be performed from a local environment. The vendor was contacted early about this disclosure but did not respond in any way.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.