Tonec Internet Download Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Tonec Internet Download Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2010-0995 — CVSS 9.3 (critical): Stack-based buffer overflow in Internet Download Manager (IDM) before 5.19 allows remote attackers to execute arbitrary code via a crafted…
• CVE-2025-56231 — CVSS 9.1 (critical): Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass…
• CVE-2020-23060 — CVSS 7.1 (high): Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Export/Import function. This vulnerability…
• CVE-2020-28964 — CVSS 6.7 (medium): Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows…