Vulnerabilidades de Minitool
CVEs publicadas que afetam produtos de Minitool: 2 registro(s), com severidade, exploração e correções.
CVE-2026-15475
Média · 5.3
CWE-266 12/07/2026
MiniTool Partition Wizard Signed Kernel Driver pwdrvio.sys access control
A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is an unknown function in the library pwdrvio.sys of the component Signed Kernel Driver. This manipulation causes improper access controls. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. Upgrading to version 13.9 is sufficient to fix this issue. The affected component should be upgraded. The vendor was contacted early about this disclosure.
CVE-2020-36953
Alta · 7.8
CWE-428 26/01/2026
MiniTool ShadowMaker 3.2 - 'MTAgentService' Unquoted Service Path
MiniTool ShadowMaker 3.2 contains an unquoted service path vulnerability in the MTAgentService that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\MiniTool ShadowMaker\AgentService.exe' to inject malicious executables and escalate privileges.