This vulnerability affects the kernel driver file idmwfp.sys in Tonec Internet Download Manager versions up to 6.42 Build 63 on Windows. It results from improper access controls that could allow a local attacker to escalate privileges or perform unauthorized actions. The vulnerability has a CVSS 4.0 score of 9.3, indicating critical severity. Exploit code is publicly available, increasing the risk of exploitation. The vendor was notified but has not issued any advisory or patch.

An attacker with local access can exploit this vulnerability to bypass access controls in the kernel driver, potentially leading to privilege escalation or unauthorized system modifications. The high CVSS score reflects the critical nature of the flaw and the availability of public exploit code.

No official fix or patch is currently available from the vendor. Users should limit local access to trusted individuals and monitor for suspicious activity. Since the vendor has not responded, check for any future advisories or updates. Consider applying system-level mitigations such as restricting driver loading or using endpoint protection solutions that can detect exploit attempts.