Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
1.9
CVE-2026-94137: Hangzhou Shunwang shzh driver can crash system locally
CVE-2026-94137 · published 28 days ago
Summary
The shzh version 10.7.2.693 includes a driver (shdrv_x64.sys) that can be forced to stop working if a local user sends a specially crafted process ID. This causes the computer to become unresponsive and may require a restart. Apply the vendor's latest patch or update to prevent the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| hangzhou shunwang technology | shzh | 10.7.2.693 |
Original advisory text
Hangzhou Shunwang Technology shzh IRP_MJ_DEVICE_CONTROL shdrv_x64.sys sub_180004AC0 denial of service
A vulnerability was identified in Hangzhou Shunwang Technology shzh 10.7.2.693. This affects the function sub_180004AC0 of the file shdrv_x64.sys of the component IRP_MJ_DEVICE_CONTROL Handler. The manipulation of the argument PID leads to denial of service. The attack must be carried out locally.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
1.9
Low
Type
CWE-404Improper Resource Shutdown or Release
Timeline
Published21 Sep 2026
Updated16 Oct 2026
First seen21 Sep 2026
Track software like this
Free during beta