PT-2025-46419 · Unknown · System Event Log Viewer Utility

CVE-2025-31645 · Published 2025-11-11 · Updated 2025-11-11

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions System Event Log Viewer Utility software (affected versions not specified)

Description An uncontrolled search path in some System Event Log Viewer Utility software within Ring 3: User Applications may allow an escalation of privilege. A local, unprivileged adversary with authenticated user access and a high complexity attack may be able to escalate privileges. This requires active user interaction and does not require special internal knowledge. The issue may impact the confidentiality, integrity, and availability of the vulnerable system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2025-31645

Affected Products

System Event Log Viewer Utility

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-31645 · Security Note
• https://twitter.com/CVEnew/status/1988303462292160520 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01380.html · Note