CVE-2026-82671: Improper Privilege Management in IObit Unlocker

This vulnerability affects IObit Unlocker 1.3.0.12 and is located in the ZwTerminateProcess function of the IObitUnlocker.sys driver component, specifically in the IRP_MJ_DEVICE_CONTROL handler. The flaw leads to improper privilege management, potentially allowing a local attacker with high privileges to perform unauthorized actions. The vendor was contacted but did not provide any response or patch information. No known exploits are reported in the wild.

The vulnerability allows improper privilege management which could enable a local attacker with high privileges to misuse the ZwTerminateProcess function. Given the CVSS score of 4.6 (medium severity), the impact is limited to local privilege misuse without remote exploitation or user interaction. No evidence of active exploitation is known.

No official patch or remediation guidance is currently available from the vendor. Since the vendor has not responded to disclosure and no patch links exist, users should exercise caution when running version 1.3.0.12 of IObit Unlocker and consider limiting local access to trusted users only. Monitor vendor channels for any future updates or patches.