PT-2025-51895 · Drivelock · Drivelock

Published 2025-12-17 · Updated 2026-01-02 · CVE-2025-67781

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DriveLock versions 24.1 through 24.1.5 DriveLock versions 24.2 through 24.2.6 DriveLock versions 25.1 through 25.1.4

Description Local users with limited privileges can manipulate processes running with higher privileges on Windows systems. This allows them to gain elevated privileges.

Recommendations Update DriveLock to version 24.1.6 or later. Update DriveLock to version 24.2.7 or later. Update DriveLock to version 25.1.5 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-67781

Affected Products

Drivelock

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-67781 · Security Note
• https://osv.dev/vulnerability/CVE-2025-67781 · Vendor Advisory
• https://drivelock.help/en-us/Content/Home.htm · Note
• https://twitter.com/CVEnew/status/2002835985491530159 · Twitter Post
• https://t.me/cveNotify/147539 · Telegram Post