CVE-2026-12784

HIGH

IM-Magic Partition Resizer Kernel Driver MDA_NTDRV.sys access control

Title source: cna
STIX 2.1

Description

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the library MDA_NTDRV.sys of the component Kernel Driver. This manipulation causes improper access controls. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

References (5)

Core 5
Core References
Vdb Entry vdb-entry
VDB-372524 | IM-Magic Partition Resizer Kernel Driver MDA_NTDRV.sys access control
https://vuldb.com/vuln/372524
Signature, Permissions Required signature permissions-required
VDB-372524 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/372524/cti
Third Party Advisory third-party-advisory
CVE-2026-12784 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-12784
Third Party Advisory third-party-advisory
Submit #835613 | IM-Magic Partition Resizer Kernel Driver MDA_NTDRV.sys 7.9.0 Local Privilege Escapation
https://vuldb.com/submit/835613

Scores

CVSS v3 7.8
EPSS 0.0011
EPSS Percentile 1.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-266 CWE-284
Status published
Products (10)
IM-Magic/Partition Resizer 7.0
IM-Magic/Partition Resizer 7.1
IM-Magic/Partition Resizer 7.2
IM-Magic/Partition Resizer 7.3
IM-Magic/Partition Resizer 7.4
IM-Magic/Partition Resizer 7.5
IM-Magic/Partition Resizer 7.6
IM-Magic/Partition Resizer 7.7
IM-Magic/Partition Resizer 7.8
IM-Magic/Partition Resizer 7.9.0
Published Jun 21, 2026
Tracked Since Jun 21, 2026