CVE-2026-58583
FluxInk Color Management Driver local privilege escalation
CVSS Score
7.1
EPSS Score
0.0%
EPSS Percentile
0th
FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical memory mapping at \Device\PhysicalMemory. Fixed in version 1.0.7.6. The fixed driver is currently available in the Windows 11 25H2 HLK (Hardware Lab Kit). The fixed driver may be available through Windows Update or from Lenovo directly.
| CWE | CWE-269 |
| Vendor | fluxink |
| Product | color management driver |
| Published | Jul 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for fluxink color management driver
Be the first to know when new high vulnerabilities affecting fluxink color management driver are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected Versions
FluxInk / Color Management Driver
0 < 1.0.7.6
References
github.com: https://github.com/b3s3da/TcnPeripheral64_PoC/security/advisories/GHSA-x4rw-h4v2-v83h github.com: https://github.com/b3s3da/TcnPeripheral64_PoC cve.org: https://www.cve.org/CVERecord?id=CVE-2026-58583 raw.githubusercontent.com: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-188-01.json
Credits
Julian Horoszkiewicz, Atos Threat Research Center