CVE-2026-12784 is an improper access control vulnerability in the kernel driver (MDA_NTDRV.sys) of IM-Magic Partition Resizer versions up to 7.9.0. The flaw allows a local attacker with limited privileges to manipulate the driver in a way that bypasses intended access restrictions. Although the vendor was notified early, no response or fix has been provided. Public exploit code is available, indicating potential for active exploitation. The CVSS 4.0 base score is 8.5, reflecting high impact on confidentiality, integrity, and availability with low attack complexity and no user interaction required.

An attacker with local access can exploit this vulnerability to bypass access controls in the kernel driver, potentially leading to unauthorized actions affecting system confidentiality, integrity, and availability. The high CVSS score indicates significant risk if exploited. Public exploit code availability increases the likelihood of exploitation attempts. No vendor fix or mitigation has been confirmed, leaving affected systems exposed.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to disclosure attempts. Users should restrict local access to trusted personnel only and consider disabling or uninstalling IM-Magic Partition Resizer until a fix is released. Monitor vendor channels for updates and apply any future patches promptly. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.