Privilege Escalation Vulnerability in IOBit Advanced SystemCare by IOBit

CVE-2021-21788

What is CVE-2021-21788?

A vulnerability in IOBit Advanced SystemCare Ultimate version 14.2.0.220 allows local attackers to escalate privileges. This occurs due to improper handling of privileged I/O write requests within the driver. Specifically, during the execution of IOCTL 0x9c40a0dc, attackers can manipulate the input buffer to gain elevated access, potentially allowing them to write arbitrary bytes to specified I/O device ports. This flaw opens the door for unauthorized access and exploitation by unprivileged users, underscoring the need for prompt security measures.

References