CVE-2020-10234: The AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged user to send
CVE-2020-10234 is a medium-severity flaw (CVSS 6.5) affecting advanced systemcare. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged user to send an IOCTL to the device driver. If the user provides a NULL entry for the dwIoControlCode parameter, a kernel panic (aka BSOD) follows. The IOCTL codes can be found in the dispatch function: 0x8001E000, 0x8001E004, 0x8001E008, 0x8001E00C, 0x8001E010, 0x8001E014, 0x8001E020, 0x8001E024, 0x8001E040, 0x8001E044, and 0x8001E048. \DosDevices\As
Why this priority
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 6.5 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 3.3% (top 12%) |
| CISA exploited list | No |
| Published | 2021-02-05 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-10234?
advanced systemcare: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2020-10234 being exploited?
CVE-2020-10234 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-10234 affect?
CVE-2020-10234 affects advanced systemcare. Severity is medium (CVSS 6.5). The AscRegistryFilter.sys kernel driver in IObit Advanced SystemCare 13.2 allows an unprivileged user to send an IOCTL to the device driver. If the user provides a NULL entry for the dwIoControlCode parameter, a kernel panic (aka BSOD) foll
How urgent is CVE-2020-10234?
Priority 50/100. Public exploit reference
Related CVEs
- CVE-2022-24138 HIGH 7.8 DOWNGRADE IOBit Advanced System Care (Asc.exe) 15 and Action Download Center both download components of IOBit suite int
- CVE-2021-44968 HIGH 7.8 DOWNGRADE A Use after Free vulnerability exists in IOBit Advanced SystemCare 15 pro via requests sent in sequential orde
- CVE-2020-23738 MEDIUM 5.5 DOWNGRADE There is a local denial of service vulnerability in Advanced SystemCare 13 PRO 13.5.0.174
- CVE-2020-14990 HIGH 7.1 DOWNGRADE IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulat
- CVE-2018-16713 MEDIUM 6.5 UPGRADE IObit Advanced SystemCare, which includes Monitor_win10_x64.sys or Monitor_win7_x64.sys, 1.2.0.5 (and possibly