A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack can only be performed from a local environment. The exploit is publicly available and might be used. A fix is planned for the upcoming release.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 9.3 · horizon datasysNVD modified 2026-11-01 15:00
Affected (CPE criteria) 1
cpe:2.3:a:horizon_datasys:reboot_restore_standard:*:*:*:*:*:*:*:*
References 5
- https://vuldb.com/vuln/429591 vdb-entry, technical-description
- https://vuldb.com/vuln/429591/cti signature, permissions-required
- https://vuldb.com/cve/CVE-2026-120232 third-party-advisory
- https://vuldb.com/submit/1001497 third-party-advisory
- https://gist.github.com/Element2023H/a176865b1f4015e003620154f3ba103c exploit