cve-2026-36425

HIGH vulncheck_kev
Description

An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation.

Timeline
Published
2026-08-26 00:00 UTC
Last Modified
2026-08-26
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 0.0,
  "datePublished": "2026-08-26T00:00:00Z",
  "dateUpdated": "2026-08-26T00:00:00Z",
  "description": "An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation.",
  "dueDate": "",
  "id": "CVE-2026-36425",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "ardrv.sys",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "  Improper Privilege Management",
  "vendor": "OPSWAT"
}
View JSON API Download JSON