Vulnerability · Published Jun 15, 2026 · Assigned by VulDB
CVE-2026-12201IObit Malware Fighter DLL permission
Medium 5.3
In plain English
A medium-severity security flaw in Malware Fighter from IObit. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities).
Official description
A flaw has been found in IObit Malware Fighter up to 13.2.0. Affected by this vulnerability is an unknown functionality of the component DLL Handler. This manipulation causes permission issues. The attack requires local access. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IObit | Malware Fighter | 13.013.113.2.0 |
Weakness: CWE-275, CWE-266 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-370844 | IObit Malware Fighter DLL permission vdb-entry
- VDB-370844 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- CVE-2026-12201 | CVE Analysis and Report third-party-advisory
- Submit #829913 | IObit Malware Fighter 13.2.0 Insecure Permissions in Driver third-party-advisory
- https://github.com/nasawyer7/IObitDriverav related
- https://nathan2.com/posts/iobit/ exploit