CVE-2025-58074
High · 8.8CVSS
8.8
EPSS
0.1%
Published
May 4, 2026
CISA due date
—
The record
A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|