Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: BeyondTrust Privilege Management for Windows <25.4.270 Clear all filters
TI-2025-05653 CVE-2025-6250 · GHSA-vxhp-fm7f-3jrp

Privilege Management for Windows - Elevation of Privilege

Priority LOW 30

Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper protections.

CVSS 4.0HIGH 7.1 Local High privileges No interaction EPSS 0.00173 Published 2025-07-28 Fixed in <25.4.270 CWE-424
TI-2025-02017 CVE-2025-2297 · GHSA-96m4-p356-68w4

Privilege Management for Windows - Elevation of Privilege

Priority LOW 31

Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions.

CVSS 4.0HIGH 7.2 Local Low privileges No interaction EPSS 0.00131 Published 2025-07-28 Fixed in <25.4.270 CWE-268