PatchSiren

OPSWAT CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review OPSWAT CVE published 2026-07-16

CVE-2026-36425

A potential security issue was identified in OPSWAT AppRemover Driver (ardrv.sys) version 2017.10.02.1551 and earlier. The issue is related to the IOCTL handler 0x2420031, where any local user can open the device and send process termination requests without proper privilege validation. This could potentially allow unauthorized users to terminate processes, leading to security issues. System administrator [truncated]