PT-2025-35819 · Undefined · Undefined

Blacksnufkin + 1 · Published 2025-09-03 · Updated 2025-09-17 · CVE-2025-52915

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. (affected versions not specified)

Description The vulnerability is a BYOVD (Bring Your Own Vulnerable Driver) case involving a kernel driver with unrestricted process termination capabilities. This allows hackers to terminate any process on the system. Vendor coordination proved challenging during the disclosure process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-52915

Affected Products

Undefined

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-52915 · Security Note
• https://support.k7computing.com/index.php?/solutions/view-article/Advisory-issued-on-2nd-Sep-2025 · Note
• https://twitter.com/anylink20240604/status/1967191418130313535 · Twitter Post
• https://twitter.com/BlackSnufkin42/status/1963264574280315168 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1nhhri0/top_10_trending_cves_15092025 · Reddit Post
• https://k7computing.com · Note
• https://reddit.com/r/CVEWatch/comments/1nidccg/top_10_trending_cves_16092025 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1nj90xz/top_10_trending_cves_17092025 · Reddit Post
• https://twitter.com/UndercodeUpdate/status/1963350406828101955 · Twitter Post
• https://twitter.com/CVEnew/status/1965443181174260023 · Twitter Post