CVE-2025-67792
High · 7.8CVSS
7.8
EPSS
0.1%
Published
Dec 17, 2025
CISA due date
—
The record
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Local unprivileged users can manipulate a DriveLock process to execute arbitrary commands on Windows computers.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|