CVE-2026-12193
HIGHCVSS v3.1: 7.8
Source data as of:
At a glance
- Severity
- HIGH
- CVSS
- 7.8 v3.1 · NVD
- EPSS
- EPSS not provided by FIRST.org for this CVE
- CISA KEV
- No
- Type
- Memory Corruption, Heap Overflow · NVD CWE
- Attack conditions (CVSS vector)
- No user interaction · Source: NVD Vector
- Published
- 2026-06-15 · Modified: 2026-06-15
- References
- Jump to references (8)
CVSS / EPSS / KEV
Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources
Description
A vulnerability was identified in VS Revo RevoUninstaller 2.5.x/2.6.x. The affected element is the function IOCtl_Handler in the library RevoDetector.sys of the component IOCTL Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. Upgrading to version 2.7.0 is sufficient to fix this issue. It is recommended to upgrade the affected component.
References
Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.
- Reference https://github.com/Kalagious/RevoDetectorExploit/tree/master
- Reference https://jordanhiggins.blog/revouninstaller-pool-overflow-exploit/
- Reference https://vandalsuidaho-my.sharepoint.com/:w:/g/personal/higg2059_vandals_uidaho_edu/IQAMHgd…
- Reference https://vuldb.com/cve/CVE-2026-12193
- Reference https://vuldb.com/submit/829132
- Reference https://vuldb.com/submit/829133
- Reference https://vuldb.com/vuln/370839
- Reference https://vuldb.com/vuln/370839/cti