Iobit Malware Fighter vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Iobit Malware Fighter: 2 record(s), with affected versions and fixes.
cpe:2.3:a:iobit:malware_fighter

CVE-2026-12201 Medium · 5.3 CWE-266 Jun 14, 2026

IObit Malware Fighter DLL permission

A flaw has been found in IObit Malware Fighter up to 13.2.0. Affected by this vulnerability is an unknown functionality of the component DLL Handler. This manipulation causes permission issues. The attack requires local access. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2016-20059 High · 7.8 CWE-428 Apr 4, 2026

IObit Malware Fighter 4.3.1 Unquoted Service Path Privilege Escalation

IObit Malware Fighter 4.3.1 contains an unquoted service path vulnerability in the IMFservice and LiveUpdateSvc services that allows local attackers to escalate privileges. Attackers can insert a malicious executable file in the unquoted service path and trigger privilege escalation when the service restarts or the system reboots, executing code with LocalSystem privileges.