CVE-2026-92254

EUVD-2026-83737
Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls and potentially disabling security products or destabilizing the operating system, via crafted IOCTL requests sent to the \Device\wsdk device.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
watchdogCNA
6.9 MEDIUM
LOCAL
LOW
LOW
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:L/U:Amber
Base Score
CVSS 3.x
EPSS Score
Percentile: 3.44%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
watchdoganti-virus
1.8.640 ≤
𝑥
< 1.8.804
CNA
Common Weakness Enumeration
References
https://watchdog.com/anti-virus-release-notes/
https://watchdog.com/vulnerability-disclosure-policy/