CVE-2021-21786

Name of the Vulnerable Software and Affected Versions IOBit Advanced SystemCare Ultimate version 14.2.0.220

Description A privilege escalation issue exists in the handling of IOCTL 0x9c406144. This can be triggered by a specially crafted I/O request packet (IRP), leading to increased privileges. An attacker can exploit this by sending a malicious IRP.

Recommendations For IOBit Advanced SystemCare Ultimate version 14.2.0.220, consider restricting access to the IOCTL 0x9c406144 handling until a patch is available. As a temporary workaround, avoid using the vulnerable IOCTL handling to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.