Iobit vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2020-37232 Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows localHigh 8.5 · May 16, 2026
• CVE-2020-37223 IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYSTEHigh 8.5 · May 13, 2026
• CVE-2016-20059 IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalateHigh 8.5 · Apr 4, 2026
• CVE-2016-20055 IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalHigh 8.5 · Apr 4, 2026
• CVE-2020-36952 IObit Uninstaller 10 Pro contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges.High 8.5 · Jan 26, 2026
• CVE-2024-25253 Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module.High 7.5 · Nov 11, 2024
• CVE-2024-7326 A vulnerability classified as critical has been found in IObit DualSafe Password Manager 1.4.0.3.High 8.5 · Jul 31, 2024
• CVE-2024-7325 A vulnerability was found in IObit Driver Booster 11.0.0.0.High 8.5 · Jul 31, 2024
• CVE-2024-7324 A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687.High 8.5 · Jul 31, 2024
• CVE-2022-37197 IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.High 7.8 · Nov 18, 2022
• CVE-2022-24139 In IOBit Advanced System Care (AscService.exe) 15, an attacker with SEImpersonatePrivilege can create a named pipe with the same name as one of ASCService's namHigh 7.8 · Jul 6, 2022
• CVE-2022-24138 IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has "rwx"High 7.8 · Jul 6, 2022
• CVE-2022-24562 In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-syCritical 9.8 · Jun 16, 2022
• CVE-2021-44968 A Use after Free vulnerability exists in IOBit Advanced SystemCare 15 pro via requests sent in sequential order using the IOCTL driver codes, which could let a High 7.8 · Feb 18, 2022
• CVE-2021-21789 A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests.High 8.8 · Jul 7, 2021
• CVE-2021-21788 A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests.High 8.8 · Jul 7, 2021
• CVE-2021-21787 A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests.High 8.8 · Jul 7, 2021
• CVE-2021-21786 A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220.High 7.8 · Jul 7, 2021
• CVE-2020-23864 An issue exits in IOBit Malware Fighter version 8.0.2.547.High 7.8 · Oct 27, 2020
• CVE-2020-14975 The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code 0x222124.High 7.8 · Jun 23, 2020
• CVE-2020-14974 The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes (even ones running as SYSTEM) that hold a handle, via IOCTL High 7.1 · Jun 23, 2020
• CVE-2020-14990 IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS juncHigh 7.1 · Jun 22, 2020
• CVE-2018-19087 RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E044 with a size larger than 8 byteHigh 7.8 · Nov 9, 2018
• CVE-2018-19086 RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E040 with a size larger than 8 byteHigh 7.8 · Nov 9, 2018
• CVE-2018-19085 RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E048 with a size larger than 8 byteHigh 7.8 · Nov 9, 2018