CVE Intelligence

Ezbsystems vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ezbsystems products: 4 record(s), with severity, exploitation and fixes.

Ultraiso 1UltraISO Premium Edition 1Softdisk 1Easyboot 1

Exploited only (KEV) →

CVE-2026-12786 High · 7.8 CWE-266 Jun 21, 2026
Ezbsystems UltraISO Premium Edition Kernel Driver bootpt64.sys access control
A vulnerability has been found in Ezbsystems UltraISO Premium Edition up to 9.76. Affected by this issue is some unknown functionality in the library bootpt64.sys of the component Kernel Driver. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2018-25290 Medium · 6.2 CWE-120 Apr 26, 2026
Easyboot 6.6.0 Buffer Overflow Denial of Service
Easyboot 6.6.0 contains a buffer overflow vulnerability in the Replace Text function that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by accessing File > Tools > Replace Text and pasting a 7000-byte payload into the text fields to cause a denial of service.
CVE-2018-25289 Medium · 6.2 CWE-120 Apr 26, 2026
Softdisk 3.0.3 Buffer Overflow Denial of Service
Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help menu's Enter Registration Code dialog to cause a denial of service.
CVE-2018-25267 Medium · 5.5 CWE-787 Apr 22, 2026
UltraISO 9.7.1.3519 Buffer Overflow via Output FileName
UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH and SE handler records. Attackers can craft a malicious filename string with 304 bytes of data followed by SEH record overwrite values and paste it into the Output FileName field to trigger a denial of service crash.