Improper Access Control in MiniTool Partition Wizard Signed Kernel Driver

Executive Summary

CVE-2026-15475 is a local privilege escalation vulnerability in MiniTool Partition Wizard up to version 13.6. It exists in the signed kernel driver component pwdrvio.sys, which exposes a device interface allowing unprivileged users to perform raw disk read and write operations from kernel context.

This driver forwards disk IOCTL requests without enforcing normal Windows access controls, enabling an attacker with standard user privileges to bypass access restrictions. As a result, the attacker can read sensitive file contents and modify protected files by writing directly to their underlying NTFS data clusters.

The vulnerability can only be exploited locally, and a proof-of-concept tool exists demonstrating how to read and write disk sectors through the vulnerable driver.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows an unprivileged local user to bypass Windows file and disk access controls, potentially leading to unauthorized reading and modification of protected files.

• An attacker could read sensitive file contents that should be protected.
• An attacker could modify or corrupt protected files by writing directly to their disk clusters.
• This could lead to data integrity issues, unauthorized data disclosure, or system instability.

Useful 0 Not Useful 0

Compliance Impact

CVE-2026-15475 allows a local unprivileged user to bypass normal Windows access controls and read or modify protected files by exploiting a vulnerability in the signed kernel driver pwdrvio.sys of MiniTool Partition Wizard. This improper access control can lead to unauthorized disclosure and modification of sensitive data stored on the affected system.

Such unauthorized access and potential data manipulation could negatively impact compliance with data protection standards and regulations like GDPR and HIPAA, which require strict controls to protect sensitive personal and health information from unauthorized access or alteration.

Organizations using affected versions of MiniTool Partition Wizard may face increased risk of data breaches or integrity violations if this vulnerability is exploited, thereby potentially violating regulatory requirements for data confidentiality, integrity, and security.

Upgrading to version 13.9, which fixes this issue, is necessary to mitigate this risk and maintain compliance with such standards.

Useful 0 Not Useful 0