Threat Investigation
Request a demo

CVE-2026-58583

High

Description

FluxInk (formerly Sunia SPB Peripheral) Color Management Driver (TcnPeripheral64.sys) 1.0.7.2 allows local privilege escalation for a standard user account via arbitrary physical memory mapping at \Device\PhysicalMemory. Fixed in version 1.0.7.6. The fixed driver is currently available in the Windows 11 25H2 HLK (Hardware Lab Kit). The fixed driver may be available through Windows Update or from Lenovo directly.

SeverityHigh
CVSS7.1
Exploit probability—
ProductColor Management Driver
PublishedJul 7, 2026
First seenJul 7, 2026
Weakness typeCWE-269Improper privilege management

How to fix

Update
  • FluxInk Color Management Driver1.0.7.6 or later

Affected products

ProductAffected versionsFixed in
FluxInk Color Management Driverv < 1.0.7.61.0.7.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.