CVE-2025-1865CWE-284

Local Privilege Escalation in Virtual CloneDrive Kernel Driver

High · published April 4, 2025

CVSS v4.0
8.5
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privilege escalation to SYSTEM.

The record
Technical detail
CVSS v4.0
8.5 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-04-04T09:52Z
EPSS history
Timeline
  • 04 APR 09:52Z
    Local Privilege Escalation in Virtual CloneDrive Kernel Driver
    cvelistv5