The Core Temp kernel driver, provided by ALCPU, contains an insufficient access‑control check on a publicly exposed IOCTL interface. This flaw permits a local attacker to read from or write to arbitrary physical memory, effectively bypassing kernel protections. As a result, the vulnerability can be leveraged for local privilege escalation, enabling an attacker with user access to gain kernel‑level capabilities or compromise system integrity. The weakness is classified as CWE‑782, Incorrect Access Control.

The affected software is ALCPU's Core Temp utility, which installs a kernel‑mode driver on Windows systems. No specific version range is supplied in the CNA data, so all installations of Core Temp that include the vulnerable driver should be considered potentially affected until a fix is released.

The CVSS score of 8.4 indicates a high severity impact. The EPSS score is not available, so the current exploitation probability is unclear. The vulnerability is not listed in CISA's KEV catalog, but the failure to enforce proper access control in kernel space is a serious local issue. The likely attack vector is a local user running a malicious application that targets the exposed IOCTL to read or overwrite physical memory. Once this capability is achieved, privilege escalation or system compromise can follow.