CVE-2018-9004

CVE-2018-9004 is a denial-of-service vulnerability affecting IObit Advanced SystemCare Ultimate 11.0.1.58. The flaw lies within the Monitor_x86.sys driver, which fails to properly validate input from IOCtl 0x9c4060d0, allowing a local attacker to trigger a Blue Screen of Death (BSOD) and potentially other unspecified impacts. With a CVSS score of 7.8 (High), this vulnerability has a low attack complexity and requires local user privileges, but can lead to high impact on confidentiality, integrity, and availability. The EPSS score is very low, indicating a minimal probability of exploitation in the wild. Currently, there is no evidence of active exploitation, nor are there any public exploit modules available on platforms like Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also non-existent, suggesting a lack of widespread attention or exploitation.