Which versions of Protected Folder are affected by CVE-2025-0221?

Organizations using IOBit Protected Folder should be aware of notable risk from CVE-2025-0221 rated CVSS 6.8. Exploitation could compromise the security of affected deployments.

Is there a public PoC exploit available for CVE-2025-0221?

Yes, a public proof-of-concept exploit is available for CVE-2025-0221. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-0221?

Within 7 days: Identify affected systems running IOBit Protected Folder and apply vendor patches promptly. Monitor vendor channels for patch availability.

Protected Folder CVE-2025-0221

Q: What is the CVSS score of CVE-2025-0221?

CVE-2025-0221 has a CVSS 4.0 base score of 6.8 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

MEDIUM

Improper Resource Shutdown or Release (CWE-404)

2025-01-05 cna@vuldb.com

Denial Of Service Protected Folder I0Bit

6.8

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.8 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:02 vuln.today

PoC Detected

Jan 23, 2025 - 17:52 vuln.today

Public exploit code

CVE Published

Jan 05, 2025 - 15:15 nvd

MEDIUM 6.8

DescriptionCVE.org

A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the library pffilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-404. A vulnerability has been found in IOBit Protected Folder up to 1.3.0 and classified as problematic. This vulnerability affects the function 0x22200c in the library pffilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Affected products include: I0Bit Protected Folder. Version information: up to 1.3.0.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.