BaselineWatch
Desk

CVE-2026-120232

9.3 critical Published

A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub_23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack can only be performed from a local environment. The exploit is publicly available and might be used. A fix is planned for the upcoming release.

Fix

Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.

Change history 1

  1. First seenCVSS 9.3 · horizon datasysNVD modified 2026-11-01 15:00

Affected (CPE criteria) 1

  • cpe:2.3:a:horizon_datasys:reboot_restore_standard:*:*:*:*:*:*:*:*

References 5