CVE-2019-9729

7.8 highEPSS 1.0%

High (7.8) in shanda maplestory online. EPSS 1.0% chance of exploitation in the next 30 days.

In Shanda MapleStory Online V160, the SdoKeyCrypt.sys driver allows privilege escalation to NT AUTHORITY\SYSTEM because of not validating the IOCtl 0x8000c01c input value, leading to an integer signedness error and a heap-based buffer underflow.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWEs: CWE-129, CWE-787
Published: 2019-03-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

shanda:maplestory_online

References

https://github.com/DoubleLabyrinth/SdoKeyCrypt-sys-local-privilege-elevation
https://github.com/DoubleLabyrinth/SdoKeyCrypt-sys-local-privilege-elevation

Check your stack JSON