CVE-2025-47809

HighCVSS 8.2/10Last modified Sep 8, 2026

Description

Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged installation with UAC, and the CodeMeter Control Center component must be installed, and the CodeMeter Control Center component must not have been restarted. In this scenario, the local user can navigate from Import License to a privileged instance of Windows Explorer.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-272

Affected software

No affected versions have been published.

Timeline

Published: May 16, 2025
Last modified: Sep 8, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-47818.8A vulnerability classified as critical has been found in PHPGurukul Park Ticketing Management System 2.0. Affected is an unknown function of CVE-2025-478116.6In Wing FTP Server through 7.4.4, the administrative web interface (listening by default on port 5466) runs as root or SYSTEM by default. Th CVE-2025-4781210.0In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code CVE-2025-478134.3loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UI CVE-2025-478149.8libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_CVE-2025-478159.8libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_CVE-2025-478169.1libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause an spvxml-helpers.c spvxml_parse_attributes out-of-bounds read, related t CVE-2025-478178.8In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter.CVE-2025-478184.6Flock Safety Gunshot Detection devices before 1.3 have a hard-coded password for a connection.CVE-2025-478196.8Flock Safety Gunshot Detection devices before 1.3 have an on-chip debug interface with improper access control.CVE-2025-47828.8A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as critical. This vulnerability affect CVE-2025-478202.4Flock Safety Gunshot Detection devices before 1.3 have cleartext storage of code.