CVE-2026-36425

An issue in OPSWAT AppRemover Driver ardrv.sys v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation...

CVE-2026-36425

The OPSWAT AppRemover Driver (ardrv.sys) versions v2017.10.02.1551 and earlier contain an Improper Access Control vulnerability (CWE-284) in IOCTL handler 0x2420031. The driver exposes a device object (\.\ardrv) accessible to unprivileged local users without privilege validation. An attacker can ...