Dashboard / CVE-2026-58583

CVE-2026-58583

HIGH
MEDIUM Priority: 0.01 BB Relevance: 42/100
Published: 2026-07-07 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: High
VI: High
VA: None

Description

FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical memory mapping at \Device\PhysicalMemory. Fixed in version 1.0.7.6. The fixed driver is currently available in the Windows 11 25H2 HLK (Hardware Lab Kit). The fixed driver may be available through Windows Update or from Lenovo directly.

Weakness Classification (1)

References & Advisories (4)

Bug Bounty Relevance

42 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

8.4 / 10.0 v4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.14%
Raw Score 0.001450
Percentile 3.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00145
2026-10-28
0.00145

Intelligence Sources

nvd ref →

External Links