{"cvss":0.0,"datePublished":"2026-08-26T00:00:00Z","dateUpdated":"2026-08-26T00:00:00Z","description":"An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation.","dueDate":"","id":"CVE-2026-36425","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"ardrv.sys","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"  Improper Privilege Management","vendor":"OPSWAT"}