CVE-2026-12784 is an improper access control vulnerability affecting IM-Magic Partition Resizer versions 7.0 through 7.9.0. The flaw exists in an unspecified function within the kernel driver library MDA_NTDRV.sys. This weakness allows an attacker with local access and low privileges to bypass access restrictions, potentially leading to elevated privileges or unauthorized actions within the system. The vendor was notified but did not provide a response or patch. The vulnerability has a CVSS 4.0 base score of 8.5, indicating high severity, with low attack complexity and no user interaction required. Exploit code has been publicly released, increasing the risk of exploitation.

An attacker with local access and limited privileges can exploit this vulnerability to bypass proper access controls in the kernel driver, potentially leading to privilege escalation or unauthorized system modifications. This could compromise system integrity and security. The availability of a public exploit increases the likelihood of exploitation in affected environments.

No official patch or remediation is currently available as the vendor has not responded to the disclosure. Users should restrict local access to trusted individuals only and consider disabling or uninstalling IM-Magic Partition Resizer versions 7.0 through 7.9.0 until a fix is provided. Monitor vendor communications for any future updates or patches addressing this vulnerability.