CVE-2025-1865CWE-284
Local Privilege Escalation in Virtual CloneDrive Kernel Driver
High · published April 4, 2025
What it is
The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privilege escalation to SYSTEM.
The record
Technical detail
- CVSS v4.0
- 8.5 · HIGH
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
- EPSS
- 0.00155 · 4.3th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2025-04-04T09:52Z
EPSS history
Timeline