PT-2026-51193 · Im Magic · Partition Resizer

Winslow1984 · Published 2026-06-20 · Updated 2026-06-21 · CVE-2026-12784

Mitre

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A weakness has been identified in IM-Magic Partition Resizer up to 7.9.0. This affects an unknown function in the library MDA NTDRV.sys of the component Kernel Driver. This manipulation causes improper access controls. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Exploit

Fix

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

Related Identifiers

CVE-2026-12784

Affected Products

Partition Resizer

References · 7

• 🔥 https://winslow1984.com/books/cve-collection/page/im-magic-partition-resizer-790-kernel-driver-mda-ntdrvsys-local-privilege-escalation · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-12784 · Security Note
• https://vuldb.com/cve/CVE-2026-12784 · Note
• https://vuldb.com/vuln/372524 · Note
• https://vuldb.com/vuln/372524/cti · Note
• https://vuldb.com/submit/835613 · Note
• https://twitter.com/senzee1984/status/2068475267102752988 · Twitter Post