10
CVEs
0
Critical
4
High
0
KEV
6
PoC
4
Unpatched C/H
0.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
4
MEDIUM
5
LOW
1
Monthly CVE Trend
Affected Products (19)
Advanced Systemcare Ultimate
29
Malware Fighter
21
Advanced Systemcare
6
Iobit Unlocker
3
Itop Vpn
3
Advanced System Care
2
Smart Defrag
2
Driver Booster
2
Uninstaller
2
Iotransfer
2
Iobit Advanced Systemcare
1
Itop Screenshot
1
Iobit Malware Fighter
1
Iobit Uninstaller
1
Amc Security Antivirus Clean
1
Windows
1
Itop Screen Recorder
1
Advanced System Care Service
1
Unlocker
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2016-20055 | IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.5 | 0.0% | 63 |
PoC
No patch
|
| CVE-2016-20059 | IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.5 | 0.0% | 63 |
PoC
No patch
|
| CVE-2020-37223 | IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYSTEM level. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.5 | 0.0% | 63 |
PoC
No patch
|
| CVE-2020-37232 | Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attackers to escalate privileges. Rated high severity (CVSS 8.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.5 | 0.0% | 63 |
PoC
No patch
|
| CVE-2026-7832 | IObit Advanced SystemCare 19 contains a symlink following vulnerability in the ASC.exe Service component that allows local authenticated attackers to achieve high-impact confidentiality and integrity violations. The vulnerability requires local access and elevated privileges (PR:L) but has high attack complexity (AC:H), making real-world exploitation difficult despite public exploit availability. CVSS 6.4 reflects the local-only attack vector and privilege requirement, though the confidentiality and integrity impacts are rated high. | MEDIUM | 6.4 | 0.0% | 52 |
PoC
No patch
|
| CVE-2025-66676 | An issue in IObit Unlocker v1.3.0.11 allows attackers to cause a Denial of Service (DoS) via a crafted request. [CVSS 6.2 MEDIUM] | MEDIUM | 6.2 | 0.0% | 31 |
No patch
|
| CVE-2026-12201 | Permission misconfiguration in IObit Malware Fighter's DLL Handler component (versions up to 13.2.0) allows a local low-privileged attacker to exploit insecure resource permissions, resulting in low-severity confidentiality, integrity, and availability impacts. The vulnerability stems from CWE-275 (Improper Permission Assignment for a Resource), and a public proof-of-concept exploit is available via GitHub and a researcher blog post. The vendor was notified prior to disclosure but did not respond, meaning no official patch or mitigation guidance has been issued. | LOW | 1.9 | 0.1% | 30 |
PoC
No patch
|
| CVE-2026-90485 | IURegistryFilter.sys, the kernel-mode registry filter driver bundled with IOBit Uninstaller 15.5.0.11, can be crashed by any local low-privileged user by sending a crafted IOCTL to the sub_11838 dispatch handler, which dereferences a null pointer in kernel context and produces a system-wide crash (BSOD). The attack surface is broader than a single product: the advisory explicitly states that the identical IURegistryFilter.sys driver ships across multiple other IObit product families, meaning all such products on an affected host are vectors. A published proof-of-concept exploit exists (CVSS 4.0 E:P), and no vendor patch is available - the vendor did not respond to coordinated disclosure. | MEDIUM | 5.4 | 0.2% | 27 |
No patch
|
| CVE-2026-82670 | Privilege management failure in IObit Uninstaller 15.5.0.11's kernel driver IUForceDelete.sys allows a local low-privileged user to send crafted IOCTL requests to the IRP_MJ_DEVICE_CONTROL handler and trigger improper privilege operations, resulting in limited integrity and availability impact on the local Windows system. The vendor did not respond to coordinated disclosure, leaving no vendor-issued patch or official mitigation guidance available. No public exploit code has been identified and the vulnerability has not been added to the CISA KEV catalog at time of analysis. | MEDIUM | 4.8 | 0.1% | 24 |
No patch
|
| CVE-2026-82671 | Improper privilege management in IObit Unlocker 1.3.0.12's kernel driver (IObitUnlocker.sys) allows a locally authenticated high-privileged user to invoke ZwTerminateProcess through the IRP_MJ_DEVICE_CONTROL handler without adequate authorization checks, enabling termination of processes outside the caller's normal authority. The vulnerability is limited to systems with IObit Unlocker installed and the driver loaded, and requires existing administrator-level access to exploit. No public exploit has been identified at time of analysis, the vulnerability is not in the CISA KEV catalog, and the vendor did not respond to disclosure. | MEDIUM | 4.6 | 0.2% | 23 |
No patch
|