Vulnerability · Published Aug 31, 2026 · Assigned by VulDB

CVE-2026-82670IObit Uninstaller IOCTL IUForceDelete.sys IRP_MJ_DEVICE_CONTROL privileges management

Medium 4.4

In plain English

A medium-severity privilege mismanagement in Uninstaller from IObit. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).

Severity (CVSS 3.1)4.4Medium

Exploit odds (30 days)0.1%top 96.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw has been found in IObit Uninstaller 15.5.0.11. This affects the function IRP_MJ_DEVICE_CONTROL in the library IUForceDelete.sys of the component IOCTL Handler. Executing a manipulation can lead to improper privilege management. The attack requires local access. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
IObit	Uninstaller	15.5.0.11

Weakness: CWE-269, CWE-266 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:X/RL:X/RC:R

References

VDB-397169 | IObit Uninstaller IOCTL IUForceDelete.sys IRP_MJ_DEVICE_CONTROL privileges management vdb-entry, technical-description
VDB-397169 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-82670 | CVE Analysis and Report third-party-advisory
Submit #893875 | IObit IObit Uninstaller 15.5.0.11 Improper Privilege Management third-party-advisory