CVE-2021-21786

Summary

A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O request packet (IRP) can lead to increased privileges. An attacker can send a malicious IRP to trigger this vulnerability.

Affected Software

VendorProductVersion RangeStatus
n/aIobitIOBit Advanced SystemCare Ultimate 14.2.0.220affected

Weaknesses

  • CWE-782: CWE-782: Exposed IOCTL with Insufficient Access Control

ADP Enrichment

CVE Program Container

Additional References

References