Element2023H

**Name of the Vulnerable Software and Affected Versions** Colorful iGameCenter version 2.0.0.81 **Description** Improper privilege management exists within the IOCTL Dispatch component of the `WinRing0x64.sys` library. A local attacker can exploit this by manipulating the `PhysicalAddress`, `AlignNumer`, and `AlignSize` arguments passed to the `sub 11504()` function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IObit Uninstaller version 15.5.0.11 **Description** A flaw in the IOCTL Handler component affects the `IRP MJ DEVICE CONTROL` function within the `IUForceDelete.sys` library. Local access is required to perform a manipulation that can lead to improper privilege management. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** IObit Unlocker version 1.3.0.12 **Description** Improper privilege management occurs within the IRP MJ DEVICE CONTROL Handler component of the `IObitUnlocker.sys` library. Specifically, the issue resides in the `ZwTerminateProcess()` function. This flaw requires local access to be exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.