CVE-2026-58583

highCVSS 7.1covered by 1 sourcefirst seen 2026-07-07

FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical memory mapping at \Device\PhysicalMemory. Fixed in version 1.0.7.6. The fixed driver is currently available in the Windows 11 25H2 HLK (Hardware Lab Kit). The fixed driver may be available through Windows Update or from Lenovo directly.

⚡ Watch CVE-2026-58583

Get an email if CVE-2026-58583 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Low exploitation risk0.10% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 1% of all EPSS-scored CVEs.

Advisory coverage (1)

highCVE-2026-58583: FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 …nvd · 2026-07-07

External references

NVD record for CVE-2026-58583

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-58583 status](https://www.csirts.com/badge/CVE-2026-58583)](https://www.csirts.com/cve/CVE-2026-58583)