high7.8
CVE-2025-34489
GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue.
Impact
GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A local attacker can escalate to NT Authority/SYSTEM by sending a crafted serialized payload to a .NET Remoting Service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gfi | Mailessentials | before 21.8 |