« Volver al listado

Tonec

Tonec Internet Download Manager: vulnerabilidades y CVE

Tonec Internet Download Manager tiene 5 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE5
Últimos 12 meses2
Críticas1
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-90493Alta (8.5)0.15%—13 sept 2026
A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel Driver. The manipulation results…
CVE-2025-56231Crítica (9.1)0.23%—5 nov 2025
Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections.
CVE-2020-28964Media (6.7)0.41%—22 oct 2021
Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified vectors.
CVE-2020-23060Alta (7.1)0.41%—22 oct 2021
Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability allows attackers to escalate local process privileges via a crafted ef2 file.
CVE-2010-0995Alta (9.3)8.1%—6 may 2010
Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary code via a crafted FTP URI that causes unspecified "test sequences" to be sent from client to…

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1012 Query Registry1
  2. T1068 Exploitation for Privilege Escalation1
  3. T1190 Exploit Public-Facing Application1
  4. T1557 Adversary-in-the-Middle1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.