CVE-2024-12661

Summary

CVE-2024-12661 is a recently disclosed vulnerability affecting IObit Advanced SystemCare Ultimate versions up to 17.0.0. This issue is considered problematic due to a null pointer dereference in the function 0x8001E024 of the AscRegistryFilter.sys library within the IOCTL Handler component. The exploit requires local access and has been made public, increasing the risk for potential attacks. Unfortunately, the vendor, IObit, has not responded to the disclosure, leaving users vulnerable until a patch is released.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.