CVE-2025-26125: High severity IObit Malware Fighter vulnerability
Published Mar 17, 2025
·Updated
An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.
Affected Software
1 affected component
IObit Malware Fighter
Event History
Mar 17, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Dec 5, 57197
Event
via NVD·04:45 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-26125?
CVE-2025-26125 is a critical severity vulnerability that allows attackers to arbitrarily delete files and escalate privileges.
2
How do I fix CVE-2025-26125?
To fix CVE-2025-26125, update to the latest version of IObit Malware Fighter that addresses this vulnerability.
3
What types of attacks can exploit CVE-2025-26125?
CVE-2025-26125 can be exploited to delete critical system files and escalate privileges on affected systems.
4
Which software versions are impacted by CVE-2025-26125?
CVE-2025-26125 impacts IObit Malware Fighter version 12.1.0.
5
Is there a way to mitigate the risks of CVE-2025-26125 until a fix is applied?
To mitigate CVE-2025-26125 risks, limit user permissions and monitor file access closely until an update is available.