PT-2025-50586 · Microsoft+1 · Windows+3

Published 2025-12-11 · Updated 2025-12-11 · CVE-2025-64701

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QND Premium/Advance/Standard versions prior to 11.0.9i

Description A privilege escalation issue exists in QND Premium/Advance/Standard. A user who can log in to a Windows system with the affected product may be able to gain administrator privileges. This could lead to unauthorized access to sensitive information or the ability to perform arbitrary actions.

Recommendations Restrict user privileges. Monitor for suspicious administrator actions.

Fix

LPE

Weakness Enumeration

CWE-268

Related Identifiers

CVE-2025-64701

Affected Products

Qnd Advance

Qnd Premium

Qnd Standard

Windows

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-64701 · Security Note
• https://t.me/cveNotify/145417 · Telegram Post
• https://t.me/CVEtracker/39461 · Telegram Post
• https://qualitysoft.com/product/qnd_vulnerabilities_2025 · Note
• https://jvn.jp/jp/JVN40102375 · Note
• https://twitter.com/CVEnew/status/1999108863594057732 · Twitter Post
• https://twitter.com/offseq/status/1999049567094874523 · Twitter Post