What is GHSA-gf97-46vm-gc57?

GHSA-gf97-46vm-gc57 is a security advisory published by GitHub Security Advisories with Medium severity. An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler...

Which CVE IDs does GHSA-gf97-46vm-gc57 cover?

GHSA-gf97-46vm-gc57 covers the following CVE IDs: CVE-2026-36425. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gf97-46vm-gc57?

GHSA-gf97-46vm-gc57 has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-gf97-46vm-gc57MediumCVSS 6.5

An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler...

Vendor

GitHub Security Advisories

Published

July 16, 2026

Last Modified

July 17, 2026

🔗 CVE IDs covered (1)

CVE-2026-36425 →

📋 Description

An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031. Any local user can open the device and send process termination requests without privilege validation.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2026-36425
https://github.com/redteamfortress/CVE-2026-36425
https://www.opswat.com/products/oesis-framework/application-removal
https://www.virustotal.com/gui/file/07c5209bf83065fe760f4fee4ed2308b0c523671f68ca73a3854c2c8c28c0541
https://www.virustotal.com/gui/file/2248347b2ec49f07268a44816ebb6265677093ec277f825de1a76700ab25e3bc
https://github.com/advisories/GHSA-gf97-46vm-gc57