CVE-2025-9059CWE-269CWE-427privilege-escalation

CVE-2025-9059

published September 11, 2025

CVSS
8.8
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

The Altiris Core Agent Updater package (AeXNSC.exe) is prone to an elevation of privileges vulnerability through DLL hijacking.

The record
Technical detail
CVSS
8.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00124 · 2.0th percentile
Weaknesses
CWE-269 · Improper Privilege Management; CWE-427 · Uncontrolled Search Path Element
Published
2025-09-11T10:15Z
References (1)
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36132 · [email protected]
EPSS history
Timeline
  • 11 SEP 05:18Z
    Elevation of Privileges Vulnerability in IT Management Suite
    cvelistv5