This vulnerability in IOBit Uninstaller 15.5.0.11 is caused by a null pointer dereference in the sub_11838 function of IURegistryFilter.sys, specifically in the IOCTL Dispatch Handler component. The issue requires local access and can be triggered without user interaction. The vulnerability has a CVSS 4.0 base score of 6.8, indicating medium severity. Exploit code has been published, but there is no evidence of widespread exploitation. The vendor has not provided any response or patch for this issue. The affected component IURegistryFilter.sys is used across multiple IOBit product families.

The vulnerability can cause a null pointer dereference leading to a denial of service or potential system instability. Since it requires local access and no user interaction, an attacker with local privileges could trigger the flaw to disrupt the affected system. No further impact such as privilege escalation or remote exploitation is indicated.

No official patch or remediation is currently available from the vendor. Since the vendor has not responded and no fixes are published, users should limit local access to trusted users only. Monitor for updates from the vendor for any future patches. Until a fix is available, avoid running untrusted code or commands locally on affected versions.