HIGHπŸ‡΅πŸ‡± Wersja polska

CVE-2021-21786

CVSS 7.8v3.1pub. 2021-07-07upd. 2024-11-21

A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O request packet (IRP) can lead to increased privileges. An attacker can send a malicious IRP to trigger this vulnerability.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Iobit Advanced Systemcare Ultimate

    APP
    Iobit
    14.2.0.220
πŸ”΅
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPE
CWE
References

Related vulnerabilities

CVE-2021-21789HIGH8.8ten sam produkt

A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver ha...

CVE-2021-21788HIGH8.8ten sam produkt

A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver ha...

CVE-2021-21787HIGH8.8ten sam produkt

A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver ha...

CVE-2018-9043HIGH7.8ten sam produkt

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause...

CVE-2018-9041HIGH7.8ten sam produkt

In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause...

CVE-2021-21786 β€” Iobit β€” Advanced Systemcare Ultimate β€” HIGH β€” CVSS 7.8 | CVEbaza.pl