Vulnerability · Published Sep 12, 2026 · Assigned by VulDB

CVE-2026-90485IOBit Uninstaller IOCTL Dispatch IURegistryFilter.sys sub_11838 null pointer dereference

Medium 5.5

In plain English

A medium-severity null pointer dereference in Uninstaller from IOBit. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.2%top 94.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub_11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and may be used. Identical IURegistryFilter.sys ships across multiple IObit families. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
IOBit	Uninstaller	15.5.0.11

Weakness: CWE-476, CWE-404 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R

References

VDB-403064 | IOBit Uninstaller IOCTL Dispatch IURegistryFilter.sys sub_11838 null pointer dereference vdb-entry, technical-description
VDB-403064 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-90485 | CVE Analysis and Report third-party-advisory
Submit #887954 | IOBit IOBit Uninstaller 15.5.0.11 NULL Pointer Dereference third-party-advisory