CVE-2026-82670: Improper Privilege Management in IObit Uninstaller

This vulnerability affects IObit Uninstaller 15.5.0.11, specifically the IRP_MJ_DEVICE_CONTROL function in the IUForceDelete.sys driver component. Improper privilege management in this IOCTL handler could allow a local attacker with limited privileges to manipulate the system in a way that escalates privileges or bypasses intended access controls. The vulnerability does not require user interaction and has a CVSS 4.8 (medium) score. The vendor was contacted but did not provide any response or patch information.

A local attacker with limited privileges could exploit this vulnerability to gain improper privileges on the affected system. This could lead to unauthorized actions or access beyond the attacker's original permissions. There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users should restrict local access to trusted users only and monitor for suspicious activity related to the IUForceDelete.sys driver. Avoid running untrusted code locally until a fix is released.