Unrated severityNVD Advisory· Published Jul 16, 2026· Updated Jul 17, 2026

CVE-2026-36425

Description

An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation.

Affected products

OPSWAT/AppRemover Driverllm-create
Range: <=2017.10.02.1551
OPSWAT/oesis-frameworkllm-create
Range: <=2017.10.02.1551

Patches

Vulnerability mechanics

References

www.opswat.com/products/oesis-framework/application-removalmitre
www.virustotal.com/gui/file/07c5209bf83065fe760f4fee4ed2308b0c523671f68ca73a3854c2c8c28c0541mitre
www.virustotal.com/gui/file/2248347b2ec49f07268a44816ebb6265677093ec277f825de1a76700ab25e3bcmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000