| CVE ID | CVE-2026-90643 |
| Severity | High |
| Exploitation status | None known |
| First published | 2026-08-17 |
| Last updated | 2026-10-27 |
Summary
A vulnerability with privilege assignment handling within a component within SMART Product Drivers. SMART Product Drivers 12.30 SP1 resolves this issue. SMART strongly recommends that all customers update as soon as possible.
Vulnerability details
Impact
To help protect customers while updates are being deployed, SMART temporarily withholds technical details about this issue until public disclosure is appropriate.
Credit
SMART thanks Christophe Schleypen and the NATO Communications and Information Agency for responsibly reporting these issues and supporting the coordinated disclosure process.
Affected products
| Product | Affected version | Fixed version | Deployment |
|---|---|---|---|
| SMART Product Drivers (Windows) | 12.30.184.0 and earlier | 12.30.192.1 | Desktop |
| SMART Product Drivers (macOS) | 12.30.235.0 and earlier | 12.30.240.1 | Desktop |
Mitigations
Recommended actions
Upgrade to SMART Product Drivers SP1 (12.30.192.1 on Windows, 12.30.240.1 on macOS) as soon as possible. This is available free of charge on https://support.smarttech.com/docs/software/product-drivers-ink/12-5/en/downloads/default.cshtml.
Timeline & update log
| Date | Event |
|---|---|
| 2026-08-06 | Issue first reported by Christophe Schleypen |
| 2026-08-17 | Issue resolved in SMART Product Drivers 12.30 SP1 |
| 2026-10-27 | Case updated |