CVE-2022-37771

IObit Malware Fighter v9.2 for Microsoft Windows lacks tamper protection, allowing authenticated attackers with Administrator privileges to modify processes within the application and escalate privileges to SYSTEM via a crafted executable.

• CWE-732

• https://mrvar0x.com/2022/08/02/multiple-endpoints-security-tampering-exploit/Exploit, Third Party Advisory
• https://packetstormsecurity.com/files/167913/IObit-Malware-Fighter-9.2-Tampering-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• https://mrvar0x.com/2022/08/02/multiple-endpoints-security-tampering-exploit/Exploit, Third Party Advisory
• https://packetstormsecurity.com/files/167913/IObit-Malware-Fighter-9.2-Tampering-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry

Published

Sep 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3775When rendering certain unicode sequences, grub2's font code …7.1
• CVE-2022-3776The Restaurant Menu – Food Ordering System – Table Reservati…8.8
• CVE-2022-37767Pebble Templates 3.1.5 allows attackers to bypass a protecti…9.8
• CVE-2022-37768libjpeg commit 281daa9 was discovered to contain an infinite…7.5
• CVE-2022-37769libjpeg commit 281daa9 was discovered to contain a segmentat…6.5
• CVE-2022-37770libjpeg commit 281daa9 was discovered to contain a segmentat…6.5
• CVE-2022-37772Maarch RM 2.8.3 solution contains an improper restriction of…7.5
• CVE-2022-37773An authenticated SQL Injection vulnerability in the statisti…6.5
• CVE-2022-37774There is a broken access control vulnerability in the Maarch…5.3
• CVE-2022-37775Genesys PureConnect Interaction Web Tools Chat Service (up t…6.1
• CVE-2022-37777Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 route…7.2
• CVE-2022-37778Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 route…7.2