CVE Feed

    Dashboard / CVE / CVE-2026-90485

    CVE-2026-90485

    A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub_11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and may be used. Identical IURegistryFilter.sys ships across multiple IObit families. The vendor was contacted early about this disclosure but did not respond in any way.

    Published:Sep 12, 2026
    Last Modified:Sep 14, 2026
    EPS:Sep 12, 2026
    EPSS Score:0.00159
    CVSS Score:5.5

    Affected Products

    Vendor
    Iobit
    Product
    Uninstaller

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High