CVE-2025-60865

Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service…

High · published February 3, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

⚡ A sneaky privilege escalation vulnerability lurks in Avanquest Driver Updater v.9.1.57803.1174! Local attackers could exploit this with a mere few clicks. 🔥 Think of this as a restricted access area in a hotel where guests can easily sneak in if the front desk fails to check their credentials properly. In this case, the Driver Updater Service lacks proper permission checks, allowing unauthorized users to gain admin-level access. An attacker could waltz right into the system and gain elevated privileges, potentially wreaking havoc—modifying settings, accessing sensitive data, or even installing malicious software. This could lead to severe security breaches and a compromised system.

Put simply

Think of this as a restricted access area in a hotel where guests can easily sneak in if the front desk fails to check their credentials properly. In this case, the Driver Updater Service lacks proper permission checks, allowing unauthorized users to gain admin-level access. The insecure permissions in the Driver Updater Service allow local attackers to escape their authorized boundaries, effectively granting them administrator rights without proper validation. This vulnerability showcases insufficient access controls in the Windows component.

What to do

An attacker could waltz right into the system and gain elevated privileges, potentially wreaking havoc—modifying settings, accessing sensitive data, or even installing malicious software. This could lead to severe security breaches and a compromised system. To fix this vulnerability, immediately patch Avanquest Driver Updater to the latest version available. Review your security policies to tighten permissions and ensure that local user access is correctly restricted. Regular audits will also help mitigate future risks. You've got this! By taking these steps, your system will be more secure in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00171 · 6.2th percentile
Published
2026-02-03T00:00Z
EPSS history
Timeline
  • 03 FEB 00:00Z
    Insecure Permissions vulnerability in avanquest Driver Updater v.9.1.57803.1174 allows a local attacker to escalate privileges via the Driver Updater Service…
    cvelistv5