CVE-2025-0543 | BDVDB-2026-264257 Detail

Description#

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in execution by the SetupSVC.exe service in the context of SYSTEM.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-01-25Record published in the CVE List.
2. Version 22025-02-05Most recent update recorded in the CVE List.