CVE-2021-21791

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive information...

CVE-2021-21791

CVE-2021-21791 is an information-disclosure vulnerability in the IOBit Advanced SystemCare Ultimate 14.2.0.220 driver. TALOS details show that a local attacker can trigger privileged I/O reads via exposed IOCTL paths to the driver (notably 0x9C4060D0 for reading a word via IN). The vulnerability ...

IOBit Advanced SystemCare Ultimate Privileged I/O Read vulnerabilities

Summary An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet IRP can lead to privileged reads in the context of a driver which can result in sensitive...