Showing 3 vulnerabilities on this page for Protected Folder

Signals CISA KEV Ransomware Nuclei
IObit vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

IObit Protected Folder IOCTL IURegistryFilter.sys 0x8001E010 null pointer dereference

A vulnerability was found in IObit Protected Folder up to 13.6.0.5. It has been classified as problematic. Affected is the function 0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library IURegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE-404CWE-476Jan 5, 2025
CVSS6.8v4.0EPSS0.356%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

IObit Protected Folder IOCTL IUProcessFilter.sys 0x8001E004 null pointer dereference

A vulnerability was found in IObit Protected Folder up to 13.6.0.5 and classified as problematic. This issue affects the function 0x8001E000/0x8001E004 in the library IUProcessFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE-404CWE-476Jan 5, 2025
CVSS6.8v4.0EPSS0.356%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

IOBit Protected Folder IOCTL pffilter.sys 0x22200c null pointer dereference

A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the library pffilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE-404CWE-476Jan 5, 2025
CVSS6.8v4.0EPSS0.356%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX