PT-2025-42091 · Unknown+1 · Software Protection Platform+1

CVE-2025-59199 · Published 2025-10-14 · Updated 2026-06-12

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Software Protection Platform (affected versions not specified)

Description Improper access control in the Software Protection Platform (SPP), specifically within the Sppsvc.exe service, allows an authorized attacker to elevate privileges locally. This issue can be part of a complex attack chain involving COM, App Identity, URI quirks, and DevTools WebSockets to achieve a sandbox escape in Windows 11.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

RCE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-13028

CVE-2025-59199

Affected Products

Software Protection Platform

Windows

References · 19

• https://osv.dev/vulnerability/CVE-2025-59199 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59199 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-59199 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59199 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59199 · Security Note
• https://bdu.fstec.ru/vul/2025-13028 · Security Note
• https://twitter.com/CVEnew/status/1978198258376724595 · Twitter Post
• https://twitter.com/autumn_good_35/status/2060037060397023347 · Twitter Post
• https://t.me/malwr/9691 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1tsr525/top_10_trending_cves_31052026 · Reddit Post
• https://twitter.com/oryair1999/status/2061669780998717896 · Twitter Post
• https://t.me/cveNotify/140998 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1tvkqxk/top_10_trending_cves_03062026 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1tumdkj/top_10_trending_cves_02062026 · Reddit Post
• https://twitter.com/gudinimalware/status/2063874963396841586 · Twitter Post