CVE-2026-12201

MediumCVSS 5.3

Published: 15/06/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

A vulnerability was found in IObit Malware Fighter up to version 13.2.0 related to an unknown functionality of the DLL Handler component. Manipulation of this component causes permission issues. The attack requires local access. An exploit has been published.

Risk Assessment

An attacker with local access could exploit this vulnerability to escalate privileges or perform unauthorized operations, potentially compromising system security.

Recommendation

It is recommended to update IObit Malware Fighter to the latest available version or apply temporary mitigations such as restricting local access to the system.

Other vulnerabilities in IObit Malware Fighter

CVE-2016-20059High
IObit Malware Fighter 4.3.1 has an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services. A local attacker can place a malicious executable in the unquoted path, leading to privilege escalation to LocalSystem upon service restart or system reboot.

Original NVD description (English source)

A flaw has been found in IObit Malware Fighter up to 13.2.0. Affected by this vulnerability is an unknown functionality of the component DLL Handler. This manipulation causes permission issues. The attack requires local access. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.