PT-2026-36800 · Norton · Norton Secure Vpn

Kpc Of · Published 2026-05-04 · Updated 2026-05-29 · CVE-2025-58074

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Norton Secure VPN (affected versions not specified)

Description A privilege escalation issue occurs during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may lead to the deletion of arbitrary files and subsequent elevation of privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Insecure Operation on Windows Junction

Weakness Enumeration

CWE-1386

Related Identifiers

CVE-2025-58074

Affected Products

Norton Secure Vpn

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-58074 · Security Note
• https://gendigital.com/us/en/contact-us/security-advisories · Vendor Advisory
• https://t.me/CVEtracker/52629 · Telegram Post
• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2276 · Note
• https://t.me/cveNotify/165205 · Telegram Post
• https://twitter.com/CVEnew/status/2051336119653142966 · Twitter Post
• https://twitter.com/DFIR_Lab/status/2058383822865977761 · Twitter Post
• https://support.norton.com/sp/en/me/home/current/solutions/v20250301180004520 · Note