Iobit
82 CVEs across 23 Iobit products. Browse Iobit vulnerabilities, severities, and proof-of-concept exploits.
Iobit products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-12201 | Medium | 5.3 | 2026-06-15 | A flaw has been found in IObit Malware Fighter up to 13.2.0. Affected by this vulnerability is an unknown functionality of the component DLL Handler. This mani… |
CVE-2020-37232 | High | 7.8 | 2026-05-16 | Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows loca… |
CVE-2020-37223 | High | 7.8 | 2026-05-13 | IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYST… |
CVE-2026-7832 | High | 7.0 | 2026-05-05 | A security flaw has been discovered in IObit Advanced SystemCare 19. This affects an unknown part of the file ASC.exe of the component Service. The manipulatio… |
CVE-2016-20059 | High | 7.8 | 2026-04-04 | IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalat… |
CVE-2016-20055 | High | 7.8 | 2026-04-04 | IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to esca… |
CVE-2025-66676 | Medium | 6.2 | 2026-02-13 | An issue in IObit Unlocker v1.3.0.11 allows attackers to cause a Denial of Service (DoS) via a crafted request. |
CVE-2020-36952 | High | 7.8 | 2026-01-26 | IObit Uninstaller 10 Pro contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. A… |
CVE-2025-0223 | Medium | 5.5 | 2025-01-05 | A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x800… |
CVE-2025-0222 | Medium | 5.5 | 2025-01-05 | A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the… |
CVE-2025-0221 | Medium | 5.5 | 2025-01-05 | A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the lib… |
CVE-2024-12662 | Medium | 5.5 | 2024-12-16 | A vulnerability classified as problematic has been found in IObit Advanced SystemCare Utimate up to 17.0.0. This affects the function 0x8001E040 in the library… |
CVE-2024-12661 | Medium | 5.5 | 2024-12-16 | A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been rated as problematic. Affected by this issue is the function 0x8001E02… |
CVE-2024-12660 | Medium | 5.5 | 2024-12-16 | A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been declared as problematic. Affected by this vulnerability is the functio… |
CVE-2024-12659 | Medium | 5.5 | 2024-12-16 | A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0. It has been classified as problematic. Affected is the function 0x8001E004 in the… |
CVE-2024-12658 | Medium | 5.5 | 2024-12-16 | A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This issue affects the function 0x8001E01C in the li… |
CVE-2024-12657 | Medium | 5.5 | 2024-12-16 | A vulnerability has been found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This vulnerability affects the function 0x8001E… |
CVE-2024-7326 | High | 7.8 | 2024-07-31 | A vulnerability classified as critical has been found in IObit DualSafe Password Manager 1.4.0.3. This affects an unknown part in the library RTL120.BPL of the… |
CVE-2024-7325 | High | 7.8 | 2024-07-31 | A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library… |
CVE-2024-7324 | High | 7.8 | 2024-07-31 | A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2024-1195 | Medium | 5.5 | 2024-02-02 | A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown functionality in the library ITopVpnCa… |
CVE-2024-0430 | Medium | 5.5 | 2024-01-22 | IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver. |
CVE-2020-24089 | Medium | 5.5 | 2023-09-20 | An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a denial of service (DoS). |
CVE-2023-1646 | Medium | 5.3 | 2023-03-26 | A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affects the function 0x8018E000/0x8018E004 i… |
CVE-2023-1645 | Medium | 5.5 | 2023-03-26 | A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been classified as problematic. This affects the function 0x8018E008 in the library IMFCam… |
CVE-2023-1644 | Medium | 5.5 | 2023-03-26 | A vulnerability was found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this issue is the function 0x8018E010 in the library IM… |
CVE-2023-1643 | Medium | 5.5 | 2023-03-26 | A vulnerability has been found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this vulnerability is the function 0x8001E000/0x80… |
CVE-2023-1642 | Medium | 5.5 | 2023-03-26 | A vulnerability, which was classified as problematic, was found in IObit Malware Fighter 9.4.0.776. Affected is the function 0x222034/0x222038/0x22203C/0x22204… |
CVE-2023-1641 | Medium | 5.5 | 2023-03-26 | A vulnerability, which was classified as problematic, has been found in IObit Malware Fighter 9.4.0.776. This issue affects the function 0x222018 in the librar… |
CVE-2023-1640 | Medium | 5.5 | 2023-03-26 | A vulnerability classified as problematic was found in IObit Malware Fighter 9.4.0.776. This vulnerability affects the function 0x222010 in the library ObCallb… |
CVE-2023-1639 | Medium | 5.5 | 2023-03-26 | A vulnerability classified as problematic has been found in IObit Malware Fighter 9.4.0.776. This affects the function 0x8001E04C in the library ImfRegistryFil… |
CVE-2023-1638 | Medium | 5.5 | 2023-03-26 | A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been rated as problematic. Affected by this issue is the function 0x8001E024/0x8001E040 in… |
CVE-2022-37197 | High | 7.8 | 2022-11-18 | IOBit IOTransfer V4 is vulnerable to Unquoted Service Path. |
CVE-2022-37771 | Medium | 6.7 | 2022-09-06 | IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes wi… |
CVE-2022-24141 | Medium | 5.4 | 2022-07-06 | The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastate_iTopVPN_Pipe_Server on a loop. An attacker that opened a named pipe with the sam… |
CVE-2022-24140 | Medium | 6.6 | 2022-07-06 | IOBit Advanced System Care 15, iTop Screen Recorder 2.1, iTop VPN 3.2, Driver Booster 9, and iTop Screenshot sends HTTP requests in their update procedure in o… |
CVE-2022-24139 | High | 7.8 | 2022-07-06 | In IOBit Advanced System Care (AscService.exe) 15, an attacker with SEImpersonatePrivilege can create a named pipe with the same name as one of ASCService's na… |
CVE-2022-24138 | High | 7.8 | 2022-07-06 | IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has "rwx… |
CVE-2022-24562 | Critical | 9.8 | 2022-06-16 | In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-s… |
CVE-2021-44968 | High | 7.8 | 2022-02-18 | A Use after Free vulnerability exists in IOBit Advanced SystemCare 15 pro via requests sent in sequential order using the IOCTL driver codes, which could let a… |
CVE-2021-21792 | Medium | 5.5 | 2021-08-05 | An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A spec… |
CVE-2021-21791 | Medium | 5.5 | 2021-08-05 | An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A spec… |
CVE-2021-21790 | Medium | 5.5 | 2021-08-05 | An information disclosure vulnerability exists in the the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O read requests. A spec… |
CVE-2021-21785 | Medium | 5.5 | 2021-08-05 | An information disclosure vulnerability exists in the IOCTL 0x9c40a148 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O reque… |
CVE-2021-21789 | High | 8.8 | 2021-07-07 | A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests. During IOCTL… |
CVE-2021-21788 | High | 8.8 | 2021-07-07 | A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests. During IOCTL… |
CVE-2021-21787 | High | 8.8 | 2021-07-07 | A privilege escalation vulnerability exists in the way IOBit Advanced SystemCare Ultimate 14.2.0.220 driver handles Privileged I/O write requests. During IOCTL… |
CVE-2021-21786 | High | 7.8 | 2021-07-07 | A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. A specially crafted I/O request… |
CVE-2020-10234 | Medium | 6.5 | 2021-02-05 | The AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged user to send an IOCTL to the device driver. If the user provid… |
CVE-2020-23864 | High | 7.8 | 2020-10-27 | An issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is possible by dropping a malicious DLL file into the WindowsApps fol… |
CVE-2020-15401 | Medium | 4.4 | 2020-06-30 | IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junct… |
CVE-2020-14975 | High | 7.8 | 2020-06-23 | The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to delete, move, or copy arbitrary files via IOCTL code 0x222124. |
CVE-2020-14974 | High | 7.1 | 2020-06-23 | The driver in IOBit Unlocker 1.1.2 allows a low-privileged user to unlock a file and kill processes (even ones running as SYSTEM) that hold a handle, via IOCTL… |
CVE-2020-14990 | High | 7.1 | 2020-06-22 | IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS jun… |
CVE-2019-6494 | Medium | 6.5 | 2019-04-30 | IMFForceDelete.sys in IObit Malware Fighter 6.2 allows a low privileged user to send IOCTL 0x8016E000 along with a user defined string to a file; that file wil… |
CVE-2019-6493 | Medium | 5.5 | 2019-04-11 | SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401… |
CVE-2019-6492 | Medium | 5.5 | 2019-03-21 | SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401… |
CVE-2018-19087 | High | 7.8 | 2018-11-10 | RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E044 with a size larger than 8 byt… |
CVE-2018-19086 | High | 7.8 | 2018-11-10 | RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E040 with a size larger than 8 byt… |
CVE-2018-19085 | High | 7.8 | 2018-11-10 | RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E048 with a size larger than 8 byt… |
CVE-2018-19084 | High | 7.8 | 2018-11-10 | RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E05C with a size larger than 8 byt… |
CVE-2018-18714 | High | 7.8 | 2018-11-01 | RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E010. This can lead to… |
CVE-2018-18026 | High | 7.8 | 2018-10-19 | IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer overflow. The attacker can use DeviceIoCo… |
CVE-2018-16713 | Medium | 6.5 | 2018-09-26 | IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL… |
CVE-2018-16712 | Medium | 6.5 | 2018-09-26 | IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send a specia… |
CVE-2018-16711 | High | 8.8 | 2018-09-26 | IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL… |
CVE-2018-9044 | High | 7.8 | 2018-03-27 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unsp… |
CVE-2018-9043 | High | 7.8 | 2018-03-27 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unsp… |
CVE-2018-9042 | High | 7.8 | 2018-03-27 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unsp… |
CVE-2018-9041 | High | 7.8 | 2018-03-27 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unsp… |
CVE-2018-9040 | High | 7.8 | 2018-03-27 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win10_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unsp… |
CVE-2018-9007 | High | 7.8 | 2018-03-25 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie… |
CVE-2018-9006 | High | 7.8 | 2018-03-25 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspe… |
CVE-2018-9005 | High | 7.8 | 2018-03-25 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspe… |
CVE-2018-9004 | High | 7.8 | 2018-03-25 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie… |
CVE-2018-9003 | High | 7.8 | 2018-03-25 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie… |
CVE-2018-9002 | High | 7.8 | 2018-03-25 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspe… |
CVE-2018-9001 | High | 7.8 | 2018-03-25 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspe… |
CVE-2018-9000 | High | 7.8 | 2018-03-25 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie… |
CVE-2018-8999 | High | 7.8 | 2018-03-25 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_win7_x64.sys) allows local users to cause a denial of service (BSOD) or possibly have unspe… |
CVE-2018-8998 | High | 7.8 | 2018-03-25 | In Advanced SystemCare Ultimate 11.0.1.58, the driver file (Monitor_x86.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie… |
CVE-2014-5646 | | 2014-09-09 | The AMC Security- Antivirus, Clean (aka com.iobit.mobilecare) application 4.4.1 for Android does not verify X.509 certificates from SSL servers, which allows m… |