3
CVEs
0
Critical
0
High
0
KEV
0
PoC
0
Unpatched C/H
0.0%
Patch Rate
0.2%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
0
MEDIUM
3
LOW
0
Monthly CVE Trend
Affected Products (19)
Advanced Systemcare Ultimate
29
Malware Fighter
21
Advanced Systemcare
6
Iobit Unlocker
3
Itop Vpn
3
Advanced System Care
2
Smart Defrag
2
Driver Booster
2
Uninstaller
2
Iotransfer
2
Iobit Advanced Systemcare
1
Itop Screenshot
1
Iobit Malware Fighter
1
Iobit Uninstaller
1
Amc Security Antivirus Clean
1
Windows
1
Itop Screen Recorder
1
Advanced System Care Service
1
Unlocker
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-90485 | IURegistryFilter.sys, the kernel-mode registry filter driver bundled with IOBit Uninstaller 15.5.0.11, can be crashed by any local low-privileged user by sending a crafted IOCTL to the sub_11838 dispatch handler, which dereferences a null pointer in kernel context and produces a system-wide crash (BSOD). The attack surface is broader than a single product: the advisory explicitly states that the identical IURegistryFilter.sys driver ships across multiple other IObit product families, meaning all such products on an affected host are vectors. A published proof-of-concept exploit exists (CVSS 4.0 E:P), and no vendor patch is available - the vendor did not respond to coordinated disclosure. | MEDIUM | 5.4 | 0.2% | 27 |
No patch
|
| CVE-2026-82670 | Privilege management failure in IObit Uninstaller 15.5.0.11's kernel driver IUForceDelete.sys allows a local low-privileged user to send crafted IOCTL requests to the IRP_MJ_DEVICE_CONTROL handler and trigger improper privilege operations, resulting in limited integrity and availability impact on the local Windows system. The vendor did not respond to coordinated disclosure, leaving no vendor-issued patch or official mitigation guidance available. No public exploit code has been identified and the vulnerability has not been added to the CISA KEV catalog at time of analysis. | MEDIUM | 4.8 | 0.1% | 24 |
No patch
|
| CVE-2026-82671 | Improper privilege management in IObit Unlocker 1.3.0.12's kernel driver (IObitUnlocker.sys) allows a locally authenticated high-privileged user to invoke ZwTerminateProcess through the IRP_MJ_DEVICE_CONTROL handler without adequate authorization checks, enabling termination of processes outside the caller's normal authority. The vulnerability is limited to systems with IObit Unlocker installed and the driver loaded, and requires existing administrator-level access to exploit. No public exploit has been identified at time of analysis, the vulnerability is not in the CISA KEV catalog, and the vendor did not respond to disclosure. | MEDIUM | 4.6 | 0.2% | 23 |
No patch
|