CVE-2026-82670: IObit Uninstaller IOCTL IUForceDelete.sys IRP_MJ_DEVICE_CONTROL privileges management
A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRPMJDEVICECONTROL in the library IUForceDelete.sys of the component IOCTL Handler. Executing a manipulation can lead to improper privilege management. The attack requires local access. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running IObit Uninstaller 15.5.0.11 are affected by the reported flaw in the IUForceDelete.sys IOCTL handler. Exploitation requires local access and low privileges, so it is primarily relevant where an attacker or untrusted local user can execute code on the system.
What access does an attacker need to exploit it?
An attacker needs local access and low-level privileges. No user interaction is required according to the supplied severity vector.
Is a vendor fix available?
The available information does not identify a fix or patched version. It states that the vendor was contacted early but did not provide a response.