The vulnerability resides in the ZyArk.sys kernel driver of V‑Secure Jingyun Antivirus, enabling a local attacker to manipulate an undisclosed function and bypass the driver’s access controls, potentially elevating privileges. The impact is the compromise of system integrity and confidentiality through local privilege escalation. The weakness is classified as improper privilege management and improper access control (CWE‑266 and CWE‑284).

Affected is V‑Secure Jingyun Antivirus version 2.4.2.39, a Windows security product that includes the ZyArk.sys kernel driver. The vulnerability resides in an undocumented function of this driver, allowing local users to bypass its access controls.

The CVSS score is 8.5, indicating a high severity vulnerability. EPSS is not available, and the vulnerability is not in the CISA KEV catalog. Attack vectors are local; the description states that exploitation requires local privilege. Given the public disclosure and lack of vendor response, the risk remains high and exploitation is plausible via local access. Prompt remediation is recommended to mitigate potential privilege escalation.