Skip to content
Sign in
6.5 Medium

CVE-2021-21790 An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver…

Description

An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A specially crafted I/O request packet (IRP) can lead to privileged reads in the context of a driver which can result in sensitive information disclosure from the kernel. The IN instruction can read two bytes from the given I/O device, potentially leaking sensitive device data to unprivileged users.

Affected products and versions

Product Affected versions Fixed in
IOBit Versions not published

Other CVEs of IOBit

The 8 CVEs of IOBit →
CVE-2021-21785 An information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit Advanced SystemCare Ultimate… 6.5 Medium CVE-2021-21792 An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver… 6.5 Medium CVE-2021-21791 An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver… 6.5 Medium CVE-2021-21786 A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate… 8.8 High
Track this CVE