CVE-2026-12201

EUVD-2026-36676
A flaw has been found in IObit Malware Fighter up to 13.2.0. Affected by this vulnerability is an unknown functionality of the component DLL Handler. This manipulation causes permission issues. The attack requires local access. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
5.3 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 1%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
iobitmalware_fighter
13.0
CNA
iobitmalware_fighter
13.1
CNA
iobitmalware_fighter
13.2.0
CNA
Common Weakness Enumeration
References
https://github.com/nasawyer7/IObitDriverav
https://nathan2.com/posts/iobit/
https://vuldb.com/cve/CVE-2026-12201
https://vuldb.com/submit/829913
https://vuldb.com/vuln/370844
https://vuldb.com/vuln/370844/cti