PT-2026-60576 · Undefined · Undefined

CVE-2026-36425 · Publicado 2026-07-16 · Atualizado 2026-07-16

Mitre

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation.

Exploit

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2026-36425

Produtos afetados

Undefined

Referências · 5

• 🔥 https://github.com/redteamfortress/CVE-2026-36425 · Exploit
• https://virustotal.com/gui/file/07c5209bf83065fe760f4fee4ed2308b0c523671f68ca73a3854c2c8c28c0541 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-36425 · Nota de Segurança
• https://opswat.com/products/oesis-framework/application-removal · Nota
• https://virustotal.com/gui/file/2248347b2ec49f07268a44816ebb6265677093ec277f825de1a76700ab25e3bc · Nota