CVE-2026-94425 PUBLISHED

A vulnerability was found in Moore Threads MTT S80 Driver Package 340.150. The affected element is the function sub_140006F0C in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation results in improper privilege management. Attacking locally is a requirement. The vendor was contacted early about this disclosure but did not respond in any way.

• Element2023H (VulDB User) reporter
• VulDB CNA Team coordinator

• VDB-408151 | Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management
• VDB-408151 | CTI Indicators (IOB, IOC, TTP, IOA)
• CVE-2026-94425 | CVE Analysis and Report
• Submit #894809 | MOORE THREADS MTT S80 driver package v340.150 Incorrect Use of Privileged APIs

• Improper Privilege Management CWE
• Incorrect Privilege Assignment CWE