CVE-2025-67826 is a Local Privilege Escalation (LPE) vulnerability affecting K7 Ultimate Security version 17.0.2045. It allows an unprivileged local user to exploit insecure access to a named pipe, enabling them to modify any registry key. This flaw can lead to a full system compromise, granting SYSTEM-level privileges to the attacker. The vulnerability has a CVSS score of 7.7 (HIGH), indicating a significant risk due to its low attack complexity and the potential for complete confidentiality and integrity impact. Despite the high severity, there is currently no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage for this CVE are minimal, with no mentions or articles reported. This suggests a low level of public awareness or attention regarding this specific vulnerability at present.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
17.0.2045CPE matchmatch criteria | cpe:2.3:a:k7computing:k7_ultimate_security:17.0.2045:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.