CVE-2026-12193 HIGH

CVE-2026-12193: VS Revo RevoUninstaller IOCTL RevoDetector.sys IOCtl_Handler heap-based overflow

Vendor Vs Revo
Product RevoUninstaller
Weakness CWE-122
Published June 14, 2026
Last update June 15, 2026
View on NVD All CVEs

CVSS base score

8.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affected element is the function IOCtl_Handler in the library RevoDetector.sys of the component IOCTL Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. Upgrading to version 2.7.0 is sufficient to fix this issue. It is recommended to upgrade the affected component.

Key dates

02Disclosure timeline

June 14, 2026 CVE published
June 15, 2026 Record updated