CVE-2025-67781

Critical

Published: 17/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

In DriveLock versions 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5, local unprivileged users can manipulate privileged processes to gain more privileges on Windows computers.

Risk Assessment

The risk includes local privilege escalation, which could lead to full compromise of the Windows system and access to sensitive data.

Recommendation

It is recommended to upgrade DriveLock to version 24.1.6, 24.2.7, or 25.1.5 (depending on the version in use) and restrict local access to systems.

Original NVD description (English source)

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Local unprivileged users can manipulate privileged processes to gain more privileges on Windows computers.