CVE-2006-4926

CVE-2006-4926 describes a local privilege escalation vulnerability in Kaspersky Labs Anti-Virus 6.0.0.303 and other related products, specifically within the NDIS-TDI Hooking Engine's KLICK and KLIN device drivers. A local attacker can execute arbitrary code by sending a specially crafted Irp structure with invalid addresses to the 0x80052110 IOCTL. This vulnerability carries a CVSS score of 7.2, indicating high severity with complete confidentiality, integrity, and availability impacts, requiring local access and low attack complexity. While not listed in CISA's KEV catalog, an exploit for local overflow/privilege escalation is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.