CVE-2026-120232: Buffer Overflow

Published Nov 1, 2026

Updated

A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the function sub23908 in the library shield.sys of the component Kernel Driver. Such manipulation leads to memory corruption. The attack can only be performed from a local environment. The exploit is publicly available and might be used. A fix is planned for the upcoming release.

Event History

Nov 1, 2026

CVE Published

via NVD·03:17 PM

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations should be considered affected?

Horizon DataSys Reboot Restore Standard versions up to and including 13.2 should be considered affected where the shield.sys kernel driver is present. The issue is in the driver's sub_23908 function.

What does an attacker need to exploit this issue?

Exploitation requires local access and low privileges. No user interaction is required, and the attack is not described as remotely reachable.

Is an exploit available, and is there a fix?

A public exploit is available and may be used. A fix is planned for an upcoming release, but no fixed version is identified in the available information.

CVE-2026-120232: Buffer Overflow

Event History

Frequently Asked Questions

Which installations should be considered affected?

What does an attacker need to exploit this issue?

Is an exploit available, and is there a fix?

Company

Resources

Contact

Frequently Asked Questions

Which installations should be considered affected?

What does an attacker need to exploit this issue?

Is an exploit available, and is there a fix?