CVE-2026-82670

1th percentile - higher than 1% of all known CVEs

A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRP_MJ_DEVICE_CONTROL in the library IUForceDelete.sys of the component IOCTL Handler. Executing a manipulation can lead to improper privilege management. The attack requires local access. The vendor was contacted early about this disclosure but did not respond in any way.

Improper privilege management can allow a local attacker to escalate privileges, potentially leading to system compromise or security bypass. However, it requires local access, which limits the risk of remote attack.

Restrict local access to systems where IObit Uninstaller is installed and monitor for suspicious activity. Also consider updating to a newer version if available, or temporarily disabling the IUForceDelete.sys driver.