{"id":"CVE-2025-26125","aliases":["EUVD-2025-6530","GHSA-xcxv-mc83-gmw5"],"status":"published","title":"An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers...","description":"An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00519,"percentile":0.44583,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-782"],"published":"2025-03-17T00:00:00Z","modified":"2026-06-17T09:01:28Z","exploits":[{"source":"pocgithub","id":"ZeroMemoryEx/CVE-2025-26125","title":"ZeroMemoryEx/CVE-2025-26125","date":"2025-01-08","url":"https://github.com/ZeroMemoryEx/CVE-2025-26125"}],"references":[{"url":"https://github.com/ZeroMemoryEx/IObit-EoP"},{"url":"https://x.com/zeromemoryex/status/1876878269200449819"},{"url":"https://github.com/ZeroMemoryEx/CVE-2025-26125"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26125"},{"url":"https://github.com/advisories/GHSA-xcxv-mc83-gmw5"}],"sources":{"cve":[{"id":"CVE-2025-26125","description":"An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.","status":"published","published":"2025-03-17T00:00:00Z","modified":"2025-03-24T13:01:22.56Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-782"],"updated_at":"2026-11-02T14:32:27.932735Z"}],"euvd":[{"id":"EUVD-2025-6530","description":"An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.","status":"published","published":"2025-03-17T00:00:00Z","modified":"2025-03-24T13:01:22Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:55.116366Z"}],"ghsa":[{"id":"GHSA-xcxv-mc83-gmw5","title":"An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers...","description":"An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.","status":"published","published":"2025-03-17T18:31:53Z","modified":"2025-03-19T21:30:50Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H","level":"medium"}],"cwes":["CWE-782"],"updated_at":"2026-11-02T15:00:21.948026Z"}],"nvd":[{"id":"CVE-2025-26125","description":"An exposed ioctl in the IMFForceDelete driver of IObit Malware Fighter v12.1.0 allows attackers to arbitrarily delete files and escalate privileges.","status":"published","published":"2025-03-17T18:15:21.763Z","modified":"2026-06-17T09:01:28.08Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-782"],"updated_at":"2026-11-02T14:10:54.744127Z"}]}}
