VYPR

Malware Fighter

by Iobit

CVEs (24)

  • CVE-2016-20059HigApr 4, 2026
    risk 0.51cvss 7.8epss 0.00

    IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege…

  • CVE-2020-23864HigOct 27, 2020
    risk 0.51cvss 7.8epss 0.01

    An issue exits in IOBit Malware Fighter version 8.0.2.547. Local escalation of privileges is possible by dropping a malicious DLL file into the WindowsApps folder.

  • CVE-2018-19087HigNov 10, 2018
    risk 0.51cvss 7.8epss 0.01

    RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E044 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

  • CVE-2018-19086HigNov 10, 2018
    risk 0.51cvss 7.8epss 0.01

    RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E040 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

  • CVE-2018-19085HigNov 10, 2018
    risk 0.51cvss 7.8epss 0.01

    RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E048 with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

  • CVE-2018-19084HigNov 10, 2018
    risk 0.51cvss 7.8epss 0.01

    RegFilter.sys in IOBit Malware Fighter 6.2 is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E05C with a size larger than 8 bytes. This can lead to denial of service or code execution with root privileges.

  • CVE-2018-18714HigNov 1, 2018
    risk 0.51cvss 7.8epss 0.01

    RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E010. This can lead to denial of service (DoS) or code execution with root privileges.

  • CVE-2018-18026HigOct 19, 2018
    risk 0.51cvss 7.8epss 0.01

    IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer overflow. The attacker can use DeviceIoControl to pass a user specified size which can be used to overwrite return addresses. This can lead to a denial of…

  • CVE-2025-26125HigMar 17, 2025
    risk 0.47cvss 7.3epss 0.01

    An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.

  • CVE-2022-37771MedSep 6, 2022
    risk 0.44cvss 6.7epss 0.00

    IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable.

  • CVE-2019-6494MedApr 30, 2019
    risk 0.42cvss 6.5epss 0.01

    IMFForceDelete.sys in IObit Malware Fighter 6.2 allows a low privileged user to send IOCTL 0x8016E000 along with a user defined string to a file; that file will be promptly deleted regardless of access controls.

  • CVE-2024-0430MedJan 22, 2024
    risk 0.36cvss 5.5epss 0.00

    IObit Malware Fighter v11.0.0.1274 is vulnerable to a Denial of Service vulnerability by triggering the 0x8001E00C IOCTL code of the ImfHpRegFilter.sys driver.

  • CVE-2020-24089MedSep 20, 2023
    risk 0.36cvss 5.5epss 0.00

    An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a denial of service (DoS).

  • CVE-2023-1645MedMar 26, 2023
    risk 0.36cvss 5.5epss 0.00

    A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been classified as problematic. This affects the function 0x8018E008 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be…

  • CVE-2023-1644MedMar 26, 2023
    risk 0.36cvss 5.5epss 0.00

    A vulnerability was found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this issue is the function 0x8018E010 in the library IMFCameraProtect.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch…

  • CVE-2023-1643MedMar 26, 2023
    risk 0.36cvss 5.5epss 0.00

    A vulnerability has been found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this vulnerability is the function 0x8001E000/0x8001E004/0x8001E018/0x8001E01C/0x8001E024/0x8001E040 in the library ImfHpRegFilter.sys of the component IOCTL Handler. The…

  • CVE-2023-1642MedMar 26, 2023
    risk 0.36cvss 5.5epss 0.00

    A vulnerability, which was classified as problematic, was found in IObit Malware Fighter 9.4.0.776. Affected is the function 0x222034/0x222038/0x22203C/0x222040 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service.…

  • CVE-2023-1641MedMar 26, 2023
    risk 0.36cvss 5.5epss 0.00

    A vulnerability, which was classified as problematic, has been found in IObit Malware Fighter 9.4.0.776. This issue affects the function 0x222018 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. An attack has to be…

  • CVE-2023-1640MedMar 26, 2023
    risk 0.36cvss 5.5epss 0.00

    A vulnerability classified as problematic was found in IObit Malware Fighter 9.4.0.776. This vulnerability affects the function 0x222010 in the library ObCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be…

  • CVE-2023-1639MedMar 26, 2023
    risk 0.36cvss 5.5epss 0.00

    A vulnerability classified as problematic has been found in IObit Malware Fighter 9.4.0.776. This affects the function 0x8001E04C in the library ImfRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to denial of service. It is possible to launch the attack…

Page 1 of 2