high7.8
CVE-2025-0889
Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM o…
Impact
Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a user process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Beyondtrust | Privilege Management For Windows | before 25.2 |