The vulnerability resides in the kernel driver ddmdrv.sys of AOMEI Dynamic Disk Manager. It permits manipulation from a local context to bypass proper access controls, effectively escalating a regular local user to system level privileges within the affected software. This flaw is a classic example of privileged access control failure, corresponding to the listed weaknesses CWE‑266 and CWE‑284.

AOMEI Dynamic Disk Manager versions up to and including 10.10.1 are affected. The vulnerability impacts the kernel driver component within these releases; users of this particular product version should consider the security risk.

The CVSS score of 8.5 places the issue in the high severity range, and the lack of EPSS availability indicates that exploitation probability is not quantified, though the exploit has been made public. The flaw is only exploitable from a local position; attack requires local user access. Because the vulnerability is not listed in the CISA KEV catalog, but has a known public exploit, administrators should treat it as an immediate threat.