Advanced SystemCare vulnerabilities

2 known vulnerabilities in Advanced SystemCare from IObit. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Advanced SystemCare: Improper Link Resolution Before File Access

  CVE-2026-7832May 5, 2026IObit

  A security flaw has been discovered in IObit Advanced SystemCare 19. This affects an unknown part of the file ASC.exe of the component Service. The manipulation results in symlink following. Attacking locally is a requirement. This attack is characterized by h

• 7.8 High severity

  Advanced Systemcare: Files or Directories Accessible to External Parties

  CVE-2022-24138Jul 6, 2022IObit

  IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has "rwx" permissions for unprivileged users. Low privilege users can use SetOpLock to wait for CreateProcess