CVE-2026-15475
MEDIUMMiniTool Partition Wizard Signed Kernel Driver pwdrvio.sys access control
Title source: cnaDescription
A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is an unknown function in the library pwdrvio.sys of the component Signed Kernel Driver. This manipulation causes improper access controls. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. Upgrading to version 13.9 is sufficient to fix this issue. The affected component should be upgraded. The vendor was contacted early about this disclosure.
References (6)
Core 6
Core References
Vdb Entry vdb-entry
VDB-377780 | MiniTool Partition Wizard Signed Kernel Driver pwdrvio.sys access control
https://vuldb.com/vuln/377780
Signature, Permissions Required signature
permissions-required
VDB-377780 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/377780/cti
Third Party Advisory third-party-advisory
CVE-2026-15475 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-15475
Third Party Advisory third-party-advisory
Submit #833842 | MiniTool MiniTool Partition Wizard 13.6 Local Privilege Escapation
https://vuldb.com/submit/833842
Scores
CVSS v3
5.3
EPSS
0.0010
EPSS Percentile
1.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-266
CWE-284
Status
published
Products (8)
MiniTool/Partition Wizard
13.0
MiniTool/Partition Wizard
13.1
MiniTool/Partition Wizard
13.2
MiniTool/Partition Wizard
13.3
MiniTool/Partition Wizard
13.4
MiniTool/Partition Wizard
13.5
MiniTool/Partition Wizard
13.6
MiniTool/Partition Wizard
13.9
Published
Jul 12, 2026
Tracked Since
Jul 12, 2026