CVE-2021-21791

CVE-2021-21791 is an information-disclosure vulnerability in the IOBit Advanced SystemCare Ultimate 14.2.0.220 driver. TALOS details show that a local attacker can trigger privileged I/O reads via exposed IOCTL paths to the driver (notably 0x9C4060D0 for reading a word via IN). The vulnerability ...

CVE-2021-21792

The CVE-2021-21792 issue affects IOBit Advanced SystemCare Ultimate 14.2.0.220, where the driver mishandles Privileged I/O read requests via IRP_MJ_DEVICE_CONTROL, allowing a local attacker to perform privileged IN reads from the kernel. TALOS-2021-1255 documents a local exploit path where an att...

CVE-2021-21788

Summary: CVE-2021-21788 affects IOBit Advanced SystemCare Ultimate 14.2.0.220, where the driver mishandles Privileged I/O write requests. The vulnerability is triggered via IOCTL 0x9c40a0dc (and related IOCTLs in TALOS analysis), where the first dword of the input buffer selects the device port a...

CVE-2021-21785

The CVE-2021-21785 issue affects IOBit Advanced SystemCare Ultimate 14.2.0.220. TALOS details show an information-disclosure vulnerability in IOCTL 0x9c40a148, where unprivileged user data reaches HalSetBusDataByOffset via IRP handling, enabling read of device configuration and registers and thus...

CVE-2021-21790

The CVE-2021-21790 issue affects IOBit Advanced SystemCare Ultimate 14.2.0.220: a flaw in the driver’s handling of Privileged I/O read requests allows a local attacker to trigger privileged reads from the kernel via crafted IRPs, potentially disclosing sensitive kernel data. TALOS details cover C...

CVE-2021-21789

Summary: CVE-2021-21789 concerns a privilege-escalation vulnerability in IOBit Advanced SystemCare Ultimate 14.2.0.220’s driver. The issue arises in the driver’s handling of Privileged I/O write requests via IOCTL 0x9c40a0e0, where the first dword of the input buffer is the target device port and...

CVE-2021-21786

CVE-2021-21786 affects IOBit Advanced SystemCare Ultimate 14.2.0.220. The IOCTL 0x9c406144 handler processes untrusted input via IRP, calling HalGetBusDataByOffset with unconstrained data, allowing an unprivileged user to escalate privileges. TALOS-2021-1253 documents a local privilege-escalation...

CVE-2018-9007

CVE-2018-9007 concerns Advanced SystemCare Ultimate 11.0.1.58, where the Monitor_x86.sys driver fails to validate input from IOCTL 0x9c4060c4. This can enable local users to trigger a denial of service (BSOD) and potentially other unspecified impacts. Documents specify the vulnerable component as...

CVE-2024-12658

CVE-2024-12658 affects IObit Advanced SystemCare Ultimate up to v17.0.0. The issue is in the IOCTL Handler’s AscRegistryFilter.sys, function 0x8001E01C, causing a null pointer dereference with local access required. Exploit details have been disclosed publicly; vendor did not respond. No patch/ve...

CVE-2024-12662

CVE-2024-12662 affects IObit Advanced SystemCare Ultimate up to 17.0.0. The flaw is in the IOCTL Handler’s AscRegistryFilter.sys function 0x8001E040, which leads to a null pointer dereference when invoked locally. Exploitation status in the sources indicates the vulnerability has been disclosed p...

CVE-2021-21787

The CVE-2021-21787 issue affects IOBit Advanced SystemCare Ultimate 14.2.0.220, involving the driver’s handling of privileged I/O write requests. In particular, IOCTL 0x9c40a0d8 reads the target device port from the input and uses OUT to write the value, enabling potential local privilege escalat...

CVE-2024-12657

The CVE affects IObit Advanced SystemCare Ultimate up to version 17.0.0, specifically the IOCTL Handler’s AscRegistryFilter.sys function 0x8001E000. The underlying issue is a null pointer dereference, enabling a local attack. Several sources confirm the vulnerability and public disclosure; Red Ha...

CVE-2024-12661

CVE-2024-12661 affects IObit Advanced SystemCare Ultimate up to v17.0.0. The issue is in the IOCTL Handler’s AscRegistryFilter.sys library, specifically function 0x8001E024, whose manipulation causes a null pointer dereference. Exploitation has been disclosed publicly and requires local access. V...

CVE-2018-9001

CVE-2018-9001 affects Advanced SystemCare Ultimate 11.0.1.58 via the Monitor_win7_x64.sys driver. The issue arises from not validating input values sent through IOCTL 0x9c402000, enabling a local attacker to cause a denial of service (BSOD) and potentially other unspecified impacts. Public connec...

CVE-2024-12659

CVE-2024-12659 affects IObit Advanced SystemCare Ultimate up to 17.0.0. The root cause is a null pointer dereference in function 0x8001E004 within AscRegistryFilter.sys IOCTL Handler. Exploitation requires local access; the vulnerability has been disclosed publicly. Availability impact is indicat...

CVE-2018-9044

CVE-2018-9044 affects Advanced SystemCare Ultimate 11.0.1.58 via the Monitor_win10_x64.sys driver. The issue arises because IOCTL 0x9c4060cc input is not validated, enabling local users to trigger a denial of service (BSOD) and potentially other impact. Documents consistently identify the vulnera...

CVE-2024-12660

CVE-2024-12660 affects IObit Advanced SystemCare Ultimate up to 17.0.0. The vulnerability is in function 0x8001E018 of AscRegistryFilter.sys (IOCTL Handler) and causes a null pointer dereference, enabling a local-host attack. Public exploit availability is indicated, with vendor non-response note...

CVE-2018-9003

CVE-2018-9003 affects Advanced SystemCare Ultimate (11.0.1.58) via the Monitor_x86.sys driver. The vendor reports a failure to validate input values for IOCTL 0x9c402000, enabling a local attacker to trigger a denial of service (BSOD) or potentially cause other unspecified impacts. The available ...

CVE-2018-9042

CVE-2018-9042 affects Advanced SystemCare Ultimate 11.0.1.58 via the Monitor_win10_x64.sys driver. The issue stems from missing validation of input values passed to IOCTL 0x9c402000, enabling local attackers to trigger a denial of service (BSOD) and potentially other impacts. Public exploitation ...

CVE-2018-9005

CVE-2018-9005 affects Advanced SystemCare Ultimate 11.0.1.58, where the kernel driver file Monitor_win7_x64.sys fails to validate input values from IOCTL 0x9c4060d0. This input validation flaw can allow a local attacker to trigger a denial of service (BSOD) and possibly other unspecified impacts....

CVE-2018-9041

CVE-2018-9041 affects Advanced SystemCare Ultimate 11.0.1.58 via the Monitor_win10_x64.sys driver. The underlying issue is improper validation of input values from IOCTL 0x9c402004, enabling local attackers to cause denial of service (BSOD) and potentially other high-impact effects. Documents con...

CVE-2018-9004

CVE-2018-9004 affects Advanced SystemCare Ultimate 11.0.1.58 via the Monitor_x86.sys driver. The vulnerability arises from not validating input values for IOCTL 0x9c4060d0, allowing local users to trigger a denial of service (BSOD) and potentially other impact. Connected documents (CNVD, NVD, CVE...

CVE-2018-8998

CVE-2018-8998 affects Advanced SystemCare Ultimate 11.0.1.58 via the driver Monitor_x86.sys. The issue arises from failure to validate input values from IOCTL 0x9c4060cc, enabling local attackers to trigger a denial of service (BSOD) and potentially other unspecified impacts. Publicly documented ...

CVE-2018-8999

Affected software: Advanced SystemCare Ultimate 11.0.1.58. Vulnerability: A driver file, Monitor_win7_x64.sys, fails to validate input values for IOCTL 0x9c4060c4, enabling a local attacker to cause a denial of service (BSOD) and possibly other impact. Impact: Local unauthorized execution context...

CVE-2018-9002

CVE-2018-9002 affects Advanced SystemCare Ultimate 11.0.1.58, where the kernel driver Monitor_win7_x64.sys mishandles input when processing IOCTL 0x9c4060cc. The root cause is input validation failure in this IOCTL path, enabling a local user to cause a denial of service (BSOD) and potentially ot...

CVE-2018-9006

CVE-2018-9006 affects Advanced SystemCare Ultimate 11.0.1.58, where the Monitor_win7_x64.sys driver fails to validate input from IOCTL 0x9c402004. This local issue can lead to a denial of service (BSOD) and potentially other impacts as described in multiple sources. The vulnerability is tied to i...

CVE-2018-9040

CVE-2018-9040 affects Advanced SystemCare Ultimate 11.0.1.58 via the driver file Monitor_win10_x64.sys. The vulnerability stems from not validating input values for IOCTL 0x9c4060c4, enabling a local attacker to cause a denial-of-service (BSOD) or potentially other impact. Exploitation details ar...

CVE-2018-9043

In CVE-2018-9043, the issue affects Advanced SystemCare Ultimate 11.0.1.58 via the driver file Monitor_win10_x64.sys. The root cause is input validation failure on IOCTL 0x9c4060d0, which can allow local users to trigger a denial of service (BSOD) and potentially cause other unspecified impact. T...

CVE-2018-9000

CVE-2018-9000 affects Advanced SystemCare Ultimate 11.0.1.58 via the Monitor_x86.sys driver. The issue arises from failing to validate input values for IOCTL 0x9c402004, enabling a local attacker to cause a denial of service (BSOD) or potentially other impact. Connected records corroborate the dr...