CVE-2025-66004CWE-35

CVE-2025-66004

Medium · published December 10, 2025

CVSS v3.1
5.7
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a23d57a8cba.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-35 · Path Traversal: '.../...//'
Published
2025-12-10T14:15Z
References (2)
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-66004 · [email protected]https://lists.debian.org/debian-lts-announce/2025/12/msg00027.html · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 10 DEC 09:10Z
    Local privilege escalation in usbmuxd from arbitrary local user to usbmux
    cvelistv5