CVE-2025-0223

Summary

CVE-2025-0223 is a newly disclosed vulnerability affecting IObit Protected Folder up to version 13.6.0.5. This issue, located in the IURegistryFilter.sys component's IOCTL Handler, is classified as problematic. An attacker can manipulate specific functions (0x8001E000/0x8001E00C/0x8001E004/0x8001E010) to induce a null pointer dereference. To exploit this vulnerability, local access is required. Regrettably, the exploit has been made public, increasing the risk for potential attacks. Despite early disclosure to the vendor, no response has been received.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.