A flaw has been discovered in Yungengxin Yun Jia Security Guard up to version 2.7.1.9 that allows a local attacker to manipulate the Pid argument passed to the sub_14000885C function in the kgameprotect.sys library. This misuse results in improper privilege management, potentially enabling the attacker to gain elevated privileges within the application or the underlying operating system. The vulnerability is limited to local access; remote exploitation has not been reported.

The affected product is Yungengxin Yun Jia Security Guard, versions up to and including 2.7.1.9. The flaw resides in the kgameprotect.sys driver component used for privilege management. No newer versions were listed in the current advisory, indicating that any version 2.7.1.9 or earlier remains vulnerable.

The CVSS score of 4.8 classifies the issue as moderate, and the EPSS score is not available, suggesting limited guidance on exploit likelihood. It is not listed in the CISA KEV catalog. Because the flaw requires local access, an attacker must already have a foothold on the target system. If successfully exploited, the attacker could elevate privileges to bypass security controls and execute arbitrary code or modify system settings within the scope of that local user.