2 matches found
Information disclosure
An information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O request packet IRP can lead to a disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...
2.1CVSS5.1AI score0.00336EPSS
SaveExploits1References1Affected Software1
CVE-2021-21785: Exposed IOCTL with Insufficient Access Control
An information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O request packet IRP can lead to a disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability...
6.5CVSS5.8AI score0.00336EPSS
SaveExploits1References2
20