Access Control Vulnerability in IM-Magic Partition Resizer by IM-Magic
CVE-2026-12784

8.5HIGH

Key Information:

Vendor

Im-magic

Status
Partition Resizer
Vendor
CVE Published:
21 June 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-12784?

A significant access control vulnerability has been detected in IM-Magic Partition Resizer versions up to 7.9.0. This issue resides in the MDA_NTDRV.sys kernel driver, allowing local users to manipulate functions and bypass access restrictions. The potential for exploitation has been made public, highlighting the importance for users to apply necessary precautions. Despite initial disclosures to the vendor regarding this vulnerability, no response has been received, escalating concerns for user security.

Affected Version(s)

Partition Resizer 7.0

Partition Resizer 7.1

Partition Resizer 7.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-12784 - Proof of Concept

References

https://vuldb.com/vuln/372524
vdb-entry
https://vuldb.com/vuln/372524/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-12784
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

winslow1984 (VulDB User)
VulDB CNA Team
.