CVE-2026-12193
VS Revo RevoUninstaller IOCTL RevoDetector.sys IOCtl_Handler heap-based overflow
- State
- Published
- Severity
- 8.5 High
- Published
- Jun 14, 2026
- Updated
- Jun 15, 2026
- Reserved
- Jun 14, 2026
Description
A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affected element is the function IOCtl_Handler in the library RevoDetector.sys of the component IOCTL Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. Upgrading to version 2.7.0 is sufficient to fix this issue. It is recommended to upgrade the affected component.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C | VulDB |
| 3.0 | 7.8 High | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C | VulDB |
| 2.0 | 6.8 Medium | AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
RevoUninstallerVS Revo |
|
References
- VDB-370839 | VS Revo RevoUninstaller IOCTL RevoDetector.sys IOCtl_Handler heap-based overflowvdb-entrytechnical-description
- VDB-370839 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- CVE-2026-12193 | CVE Analysis and Reportthird-party-advisory
- Submit #829132 | VS REVO GROUP RevoUninstaller <2.7.0 >2.5.0 Heap-based Buffer Overflowthird-party-advisory
- Submit #829133 | VS REVO GROUP RevoUninstaller <2.7.0 >2.5.0 Heap-based Buffer Overflow (Duplicate)third-party-advisory
- https://jordanhiggins.blog/revouninstaller-pool-overflow-exploit/broken-linkexploit
- https://github.com/Kalagious/RevoDetectorExploit/tree/masterexploit
- https://www.revouninstaller.com/start-freeware-download/patch
- https://vandalsuidaho-my.sharepoint.com/:w:/g/personal/higg2059_vandals_uidaho_edu/IQAMHgdfpRAkSqDsoFVswIYNAXjPVFz-admcJyl5ITzYhu0?e=4Ywwzarelated
- https://youtu.be/JR0KPjWRTns?si=Ff2bUDvv3butJyfPmedia-coverage
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.