CVE-2026-12193
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A vulnerability was identified in VS Revo RevoUninstaller in versions 2.5.x/2.6.x, affecting the IOCtl_Handler function in the RevoDetector.sys library. Such manipulation leads to heap-based buffer overflow.
Risk Assessment
The attack must be carried out locally, and publicly available exploits may be used to gain control over the system. Organizations should be aware of the risks associated with this vulnerability.
Recommendation
It is recommended to upgrade to version 2.7.0 to fix this issue. Upgrading the affected component is sufficient.
Original NVD description (English source)
A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affected element is the function IOCtl_Handler in the library RevoDetector.sys of the component IOCTL Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. Upgrading to version 2.7.0 is sufficient to fix this issue. It is recommended to upgrade the affected component.