The vulnerability lies in an unmanaged function in epmntdrv.sys that causes improper access controls. When executed locally, it permits bypassing of security checks, allowing a lower‑privileged user to elevate to higher privileges. The weakness, mapped to CWE‑266 and CWE‑284, can be exploited to overwrite kernel‑level data or execute arbitrary instructions, leading to full control over the affected system.

EaseUS Partition Master versions up to 14.5 contain the vulnerable kernel driver epmntdrv.sys. Those editions are susceptible when run on Windows systems that allow local users to load the driver. Newer releases of the product have remedied the flaw.

With a CVSS score of 8.5 the flaw is classified as high severity. The EPSS score is not available, but reports indicate the exploit code is publicly posted and can be leveraged by local adversaries. Because the attack is local, the attacker must have access to the machine, yet once achieved, escalating privileges can lead to full system compromise. The issue is not listed in the CISA KEV catalog, but its impact warrants immediate action.