CVE-2026-19382
LowCVSS 2.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A weakness has been identified in Almico Speedfan 4.52, affecting the function KiSystemCall64 in the library speedfan.sys, within the MSR Index Handler component. Manipulation can lead to a memory leak. The attack requires local access, and the exploit is publicly available.
Risk Assessment
The risk for the organization includes potential memory leak, which may lead to disclosure of sensitive data or system instability. The publicly available exploit increases the likelihood of exploitation.
Recommendation
It is recommended to immediately check if Speedfan 4.52 is in use and consider upgrading to a newer version or applying other mitigation measures, such as restricting local access to the system.
Original NVD description (English source)
A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.