CVE-2026-90485

Received Received - Intake

Null Pointer Dereference in IOBit Uninstaller

Publication date: 2026-09-12

Last updated on: 2026-09-12

Assigner: VulDB

Description

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub_11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and may be used. Identical IURegistryFilter.sys ships across multiple IObit families. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-12

Last Modified

2026-09-12

Generated

2026-09-13

AI Q&A

2026-09-13

EPSS Evaluated

N/A

NVD

CVE-2026-90485

EUVD

EUVD-2026-76913

Affected Vendors & Products

Vendor	Product	Version / Range
iobit	iobit_uninstaller	15.5.0.11

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-404	The product does not release or incorrectly releases a resource before it is made available for re-use.
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a null pointer dereference flaw in IOBit Uninstaller 15.5.0.11. It exists in the function sub_11838 of the file IURegistryFilter.sys, specifically in the IOCTL Dispatch Handler component. This issue can be triggered by a local attacker to cause a system crash or instability.

Detection Guidance

This vulnerability requires local access and involves a null pointer dereference in IOBit Uninstaller 15.5.0.11. Detection may involve monitoring for crashes or unusual behavior in IURegistryFilter.sys. Check for the presence of the vulnerable driver file and analyze system logs for related errors.

Impact Analysis

The vulnerability allows a local attacker to cause a denial of service by crashing the system or triggering instability. Since the affected driver file is shared across multiple IObit products, the impact could extend beyond just Uninstaller. Exploitation requires local access, reducing the risk for remote attacks.

Compliance Impact

This vulnerability does not directly impact compliance with GDPR, HIPAA, or similar standards as it involves a local null pointer dereference in IOBit Uninstaller. It requires local access and does not affect data confidentiality, integrity, or availability in a way that would violate these regulations.

Mitigation Strategies

Immediately uninstall IOBit Uninstaller 15.5.0.11 or upgrade to a patched version if available. Restrict local access to untrusted users to prevent exploitation.

Hi! I’m here to help you understand CVE-2026-90485. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70