CVE-2025-26125

State: Published
Severity: 7.3 High
Published: Mar 17, 2025
Updated: Mar 24, 2025
Reserved: Feb 7, 2025

Description

An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-782 Exposed IOCTL with Insufficient Access Control

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://github.com/ZeroMemoryEx/IObit-EoP
https://x.com/zeromemoryex/status/1876878269200449819
https://github.com/ZeroMemoryEx/CVE-2025-26125

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.