Skip to content
OpenAdvisories
High · 8.8 CVE-2021-21786 EUVD-2021-8958GHSA-xw24-w9w2-xw4q

A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially …

Published Jul 7, 2021 · Updated Aug 3, 2024 · Assigned by talos

Description

A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O request packet (IRP) can lead to increased privileges. An attacker can send a malicious IRP to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Iobit IOBit Advanced SystemCare Ultimate 14.2.0.220 —

References