CVE-2026-12784

Published Jun 21, 2026

Last updated a month ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-12784 identifies a weakness within IM-Magic Partition Resizer software, specifically affecting versions up to 7.9.0. The vulnerability is located in an unspecified function within the `MDA_NTDRV.sys` kernel driver library, which is a component of the software. This flaw is characterized as an improper access control issue. Exploitation of CVE-2026-12784 requires local access to the affected system. The nature of this weakness suggests a failure in privilege separation or access validation mechanisms at the kernel level. A public exploit for this vulnerability has been made available.

Description: A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the library MDA_NTDRV.sys of the component Kernel Driver. This manipulation causes improper access controls. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Source: cna@vuldb.com
NVD status: Deferred

Risk scores

CVSS 4.0

Type: Secondary
Base score: 7.1
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: HIGH

CVSS 3.1

Type: Secondary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

CVSS 2.0

Type: Secondary
Base score: 6.8
Impact score: 10
Exploitability score: 3.1
Vector string: AV:L/AC:L/Au:S/C:C/I:C/A:C

Weaknesses

cna@vuldb.com: CWE-266

Hype score: Not currently trending

References

Sources include official advisories and independent security research.