CVE-2025-0889

Publication date

2025-02-26 01:41:25

Family

BT

State

PUBLISHED

Description

Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a user process.