An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Sat, 25 Jul 2026 06:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Privilege-Invalid Process Termination via OPSWAT AppRemover Driver | |
| Weaknesses | CWE-285 |
Wed, 22 Jul 2026 06:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Privilege-Invalid Process Termination via OPSWAT AppRemover Driver | |
| Weaknesses | CWE-285 |
Thu, 16 Jul 2026 21:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation. | |
| References |
|
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-07-17T13:32:35.354Z
Reserved: 2026-04-06T00:00:00.000Z
Link: CVE-2026-36425
No data.
No data.
No data.
OpenCVE Enrichment
Updated: 2026-07-25T06:15:03Z
Weaknesses
No weakness.