High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-07-06	CVE-2022-24138	Files or Directories Accessible to External Parties vulnerability in Iobit Advanced Systemcare 15 IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite into ProgramData folder, ProgramData folder has "rwx" permissions for unprivileged users. local low complexity iobit CWE-552	7.2
2022-02-18	CVE-2021-44968	Use After Free vulnerability in Iobit Advanced Systemcare 15 A Use after Free vulnerability exists in IOBit Advanced SystemCare 15 pro via requests sent in sequential order using the IOCTL driver codes, which could let a malicious user execute arbitrary code or a Denial of Service (system crash). local low complexity iobit CWE-416	7.2