Read the docs

IObit

Records85All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high44CVSS 7.0–8.9

Exploited now

IObit records in CISA KEV

No IObit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Advanced Systemcare Ultimate 29 records MEDIUM Malware Fighter 22 records HIGH Advanced Systemcare 7 records MEDIUM Advanced System Care 3 records HIGH Iobit Unlocker 3 records MEDIUM Itop Vpn 3 records LOW Driver Booster 2 records LOW Iotransfer 2 records HIGH

Records

85 records

TI-2022-08416 CVE-2022-24562 · GHSA-xh6j-gj5f-hrpp

In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST…

Priority HIGH 75

In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system (with admin privileges) on the victim's endpoint, which…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.54483 Published 2022-06-16 No fix listed CWE-306
TI-2020-19358 CVE-2020-37223 · GHSA-gm4f-f258-vpmc

IObit Uninstaller 9.5.0.15 Unquoted Service Path Privilege Escalation

Priority HIGH 72

IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYSTEM level.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.0012 Published 2026-05-13 No fix listed CWE-428
TI-2020-19087 CVE-2020-36952 · GHSA-35jr-5458-r65r

IObit Uninstaller 10 Pro - Unquoted Service Path

Priority HIGH 72

IObit Uninstaller 10 Pro contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00166 Published 2026-01-26 No fix listed CWE-428
TI-2016-09235 CVE-2016-20059 · GHSA-rjmh-3x6m-hgvq

IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation

Priority HIGH 72

IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.0018 Published 2026-04-04 No fix listed CWE-428
TI-2016-09231 CVE-2016-20055 · GHSA-9v4r-mwfh-7f37

IObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege Escalation

Priority HIGH 72

IObit Advanced SystemCare 10.0.2 contains an unquoted service path vulnerability in the AdvancedSystemCareService10 service that allows local attackers to escalate privileges.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.0018 Published 2026-04-04 No fix listed CWE-428
TI-2026-10493 CVE-2026-12201 · GHSA-j9g6-3rjm-j8f4

IObit Malware Fighter DLL permission

Priority MEDIUM 55

A flaw has been found in IObit Malware Fighter up to 13.2.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00103 Published 2026-06-15 No fix listed CWE-266
TI-2018-11962 CVE-2018-16711 · GHSA-4g9w-hcf4-wx2j

IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys…

Priority MEDIUM 42

IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly earlier versions) allows a user to send an IOCTL (0x9C402088) with a buffer containing user defined content.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02005 Published 2018-09-26 No fix listed CWE-119
Load more
Open these records in search →