CVE-2025-67781

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Local unprivileged users can manipulate privileged processes to gain more privileges on Windows computers.

CVSS v3 9.9 CRITICAL

9.9^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.1 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://drivelock.help/en-us/Content/Home.htm	Product

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:drivelock:drivelock::::::::
	cpe:2.3:a:drivelock:drivelock::::::::
	cpe:2.3:a:drivelock:drivelock::::::::

History

13 Oct 2026, 11:10

Type	Values Removed	Values Added
Summary		(es) Se descubrió un problema en DriveLock 24.1 anterior a 24.1.6, 24.2 anterior a 24.2.7, y 25.1 anterior a 25.1.5. Usuarios locales no privilegiados pueden manipular procesos privilegiados para obtener más privilegios en equipos con Windows.

Information

Published : 2025-12-17 20:15

Updated : 2026-10-13 11:10

NVD link : CVE-2025-67781

Mitre link : CVE-2025-67781

CVE.ORG link : CVE-2025-67781

JSON object : View

Products Affected

drivelock

drivelock

CWE

CWE-269

Improper Privilege Management

{"id": "CVE-2025-67781", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-67781", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-17T20:39:48.455345Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-17T20:15:56.933", "references": [{"url": "https://drivelock.help/en-us/Content/Home.htm", "tags": ["Product"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-269"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Local unprivileged users can manipulate privileged processes to gain more privileges on Windows computers."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en DriveLock 24.1 anterior a 24.1.6, 24.2 anterior a 24.2.7, y 25.1 anterior a 25.1.5. Usuarios locales no privilegiados pueden manipular procesos privilegiados para obtener m\u00e1s privilegios en equipos con Windows."}], "lastModified": "2026-10-13T11:10:00.203", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:drivelock:drivelock:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "540852DA-B4D8-400B-8147-35960DD28869", "versionEndExcluding": "24.1.6", "versionStartIncluding": "24.1"}, {"criteria": "cpe:2.3:a:drivelock:drivelock:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "543CFF8B-6105-4B74-B810-94CFF0F429E2", "versionEndExcluding": "24.2.7", "versionStartIncluding": "24.2"}, {"criteria": "cpe:2.3:a:drivelock:drivelock:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC33832C-D3F8-44BA-9385-DFAD7E4F1C12", "versionEndExcluding": "25.1.5", "versionStartIncluding": "25.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}