Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-82670: IObit Uninstaller 15.5.0.11 can let local users gain admin rights

CVE-2026-82670 · published 2 months ago

Summary

The IObit Uninstaller version 15.5.0.11 contains a coding mistake that can allow someone with local access to increase their privilege level on the computer. This could let an attacker take control of the system or access sensitive data. Install the latest update from IObit or remove the program until a fix is released, and ensure only trusted users have local access.

Original advisory text

A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRP_MJ_DEVICE_CONTROL in the library IUForceDelete.sys of the component IOCTL Handler. Executing a manipulation can lead to improper privilege management. The attack requires local access. The vendor was contacted early about this disclosure but did not respond in any way.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

4.8 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-266Incorrect Privilege Assignment

CWE-269Improper Privilege Management

Timeline

Published31 Aug 2026

Updated26 Oct 2026

First seen31 Aug 2026

Sources

CVE-2026-82670 · NVD

Track software like this

Free during beta