This vulnerability in IObit Malware Fighter up to version 13.2.0 is caused by permission issues in an unspecified functionality of the DLL Handler component. The flaw allows an attacker with local access and low privileges to manipulate permissions, potentially leading to unauthorized actions. The vulnerability has a CVSS 4.8 (medium) score, indicating limited impact and exploit complexity. The vendor has not provided any response or patch, and no known exploits are reported in the wild.

The vulnerability allows a local attacker with low privileges to manipulate permissions within the DLL Handler component of IObit Malware Fighter. This could lead to unauthorized access or modification of resources controlled by the affected component. The impact is limited by the requirement for local access and the absence of user interaction in the attack vector.

No official fix or patch is currently available from the vendor. Users should restrict local access to trusted individuals only and monitor for suspicious activity. Since the vendor has not responded and no remediation level is provided, patch status is not yet confirmed — check the vendor advisory for current remediation guidance.