Tonec vulnerabilities
We track 2 vulnerabilities in Tonec products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 13, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Tonec vulnerabilities
- 8.8 High severity
Internet Download Manager: Incorrect Privilege Assignment
A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel Driver. The manipulation results in improper access controls. Attacking l
- 9.1 Critical severity
Internet Download Manager: Improper Certificate Validation
Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections.