TI-2026-13016 Aliases CVE-2026-15475 GHSA-fx54-g6r7-6jq2

MiniTool Partition Wizard Signed Kernel Driver pwdrvio.sys access control

MEDIUM 55CWE-266Published 2026-07-12 · Updated 2026-07-13

Key facts

Attack vector: Local
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Privilege escalation, Security bypass
Confidentiality · integrity · availability: Low · Low · Low
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-266 and CWE-284.

Summary

A weakness has been identified in MiniTool Partition Wizard up to 13.6. The affected element is an unknown function in the library pwdrvio.sys of the component Signed Kernel Driver. This manipulation causes improper access controls. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. Upgrading to version 13.9 is sufficient to fix this issue. The affected component should be upgraded. The vendor was contacted early about this disclosure.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00146 3rd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix Fixed Partition Wizard (MiniTool): 13.9

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
MiniTool	Partition Wizard	13.0; 13.1; 13.2; 13.3; 13.4; 13.5; 13.6	13.9	Patch available	CNA

Partition Wizard VendorMiniTool Affected 13.0; 13.1; 13.2; 13.3; 13.4; 13.5; 13.6 Fixed in 13.9 Patch available CNA

CPE names CNA · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:minitool:partition_wizard::::::::	—	—	MiniTool

cpe:2.3:a:minitool:partition_wizard:*:*:*:*:*:*:*:* Versions — — ·MiniTool

Remediation

Fix · CNA Partition Wizard (MiniTool) Fixed in 13.9

Timeline

2026-10-02 Threatist record created from CVE-2026-15475
2026-10-03 Alias added: GHSA-fx54-g6r7-6jq2

References

Exploit 1

https://winslow1984.com/books/cve-collection/page/minitool-partition-wizard-kernel-driver-pwdrviosys-local-privilege-escalation

Patch 1

https://www.minitool.com/partition-manager/upgrade-history.html

TI-2023-19747 MiniTool Power Data Recovery 11.6 contains an insecure installation process that allows… CVSS 3.1HIGH 8.1
TI-2023-19746 MiniTool Movie Maker 7.0 contains an insecure installation process that allows attackers… CVSS 3.1HIGH 8.1
TI-2023-19745 MiniTool Shadow Maker version 4.1 contains an insecure installation process that allows… CVSS 3.1HIGH 8.1
TI-2023-19743 MiniTool Partition Wizard 12.8 contains an insecure update mechanism that allows… CVSS 3.1HIGH 8.1
TI-2023-19742 MiniTool Partition Wizard 12.8 contains an insecure installation mechanism that allows… CVSS 3.1HIGH 8.1
TI-2020-19088 MiniTool ShadowMaker 3.2 - 'MTAgentService' Unquoted Service Path CVSS 4.0HIGH 8.5

See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences