CVE-2025-58074

תיאור (מקור, אנגלית)

A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges.

מדדים

CVSS 3.1

8.8 (HIGH) מקור הציון: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-31/7/2026

CWE

CWE-1386

קישורים

• https://support.norton.com/sp/en/me/home/current/solutions/v20250301180004520
• https://www.gendigital.com/us/en/contact-us/security-advisories/
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2276