Internet Download Manager vulnerabilities

2 known vulnerabilities in Internet Download Manager from Tonec. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Internet Download Manager: Incorrect Privilege Assignment

  CVE-2026-90493Sep 13, 2026Tonec

  A vulnerability was detected in Tonec Internet Download Manager up to 6.42 Build 63 on Windows. The impacted element is an unknown function of the file idmwfp.sys of the component Kernel Driver. The manipulation results in improper access controls. Attacking l

• 9.1 Critical severity

  Internet Download Manager: Improper Certificate Validation

  CVE-2025-56231Nov 5, 2025Tonec

  Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections.