CVE-2025-58074

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2025-58074", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "state": "PUBLISHED", "assignerShortName": "talos", "dateReserved": "2025-09-19T13:36:50.208Z", "datePublished": "2026-05-04T13:11:08.628Z", "dateUpdated": "2026-05-29T13:35:53.911Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "shortName": "GEN", "dateUpdated": "2026-05-29T13:35:53.911Z"}, "title": "Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-1386", "description": "CWE-1386: Insecure Operation on Windows Junction / Mount Point", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-29", "descriptions": [{"lang": "en", "value": "CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions"}]}, {"capecId": "CAPEC-132", "descriptions": [{"lang": "en", "value": "CAPEC-132 Symlink Attack"}]}, {"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "affected": [{"vendor": "Gen Digital", "product": "Norton Secure VPN", "platforms": ["Windows"], "versions": [{"status": "affected", "version": "6.5.0.59"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges.</p>"}]}], "tags": ["unsupported-when-assigned"], "references": [{"url": "https://www.gendigital.com/us/en/contact-us/security-advisories/", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2276", "tags": ["vendor-advisory"]}, {"url": "https://support.norton.com/sp/en/me/home/current/solutions/v20250301180004520", "tags": ["related"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "The version of the software in this report was made end of life (EOL) on 21/OCT/2025. Users are advised to upgrade to a supported newer version that does not have this vulnerability.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "The version of the software in this report was made end of life (EOL) on 21/OCT/2025. Users are advised to upgrade to a supported newer version that does not have this vulnerability.&nbsp;"}]}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-04T13:52:48.246952Z", "id": "CVE-2025-58074", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-04T13:52:53.918Z"}}, {"title": "CVE Program Container", "references": [{"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2276"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-05-04T14:44:32.529Z"}}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2276"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-05-04T14:44:32.529Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-58074", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-05-04T13:52:48.246952Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-04T13:52:50.635Z"}}], "cna": {"tags": ["unsupported-when-assigned"], "title": "Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-29", "descriptions": [{"lang": "en", "value": "CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions"}]}, {"capecId": "CAPEC-132", "descriptions": [{"lang": "en", "value": "CAPEC-132 Symlink Attack"}]}, {"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Gen Digital", "product": "Norton Secure VPN", "versions": [{"status": "affected", "version": "6.5.0.59"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "The version of the software in this report was made end of life (EOL) on 21/OCT/2025. Users are advised to upgrade to a supported newer version that does not have this vulnerability.", "supportingMedia": [{"type": "text/html", "value": "The version of the software in this report was made end of life (EOL) on 21/OCT/2025. Users are advised to upgrade to a supported newer version that does not have this vulnerability.&nbsp;", "base64": false}]}], "references": [{"url": "https://www.gendigital.com/us/en/contact-us/security-advisories/", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2276", "tags": ["vendor-advisory"]}, {"url": "https://support.norton.com/sp/en/me/home/current/solutions/v20250301180004520", "tags": ["related"]}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges.", "supportingMedia": [{"type": "text/html", "value": "<p>A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1386", "description": "CWE-1386: Insecure Operation on Windows Junction / Mount Point"}]}], "providerMetadata": {"orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "shortName": "GEN", "dateUpdated": "2026-05-29T13:35:53.911Z"}}}, "cveMetadata": {"cveId": "CVE-2025-58074", "state": "PUBLISHED", "dateUpdated": "2026-05-29T13:35:53.911Z", "dateReserved": "2025-09-19T13:36:50.208Z", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "datePublished": "2026-05-04T13:11:08.628Z", "assignerShortName": "talos"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "Norton Secure VPN", "vendor": "Gen Digital", "versions": [{"status": "affected", "version": "6.5.0.59"}]}], "source": "security@nortonlifelock.com"}], "cveTags": [{"sourceIdentifier": "security@nortonlifelock.com", "tags": ["unsupported-when-assigned"]}], "descriptions": [{"lang": "en", "value": "A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges."}, {"lang": "es", "value": "Una vulnerabilidad de escalada de privilegios existe durante la instalaci\u00f3n de Norton Secure VPN a trav\u00e9s de la Microsoft Store. Un usuario con pocos privilegios puede reemplazar archivos durante el proceso de instalaci\u00f3n, lo que puede resultar en la eliminaci\u00f3n de archivos arbitrarios que puede llevar a la escalada de privilegios."}], "id": "CVE-2025-58074", "lastModified": "2026-10-07T09:10:00.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.0, "impactScore": 6.0, "source": "security@nortonlifelock.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-58074", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-05-04T13:52:48.246952Z", "version": "2.0.3"}}]}, "published": "2026-05-04T14:16:28.480", "references": [{"source": "security@nortonlifelock.com", "url": "https://support.norton.com/sp/en/me/home/current/solutions/v20250301180004520"}, {"source": "security@nortonlifelock.com", "url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2276"}], "sourceIdentifier": "security@nortonlifelock.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1386"}], "source": "security@nortonlifelock.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.5.0.59"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Norton Secure VPN", "source": "cna", "vendor": "Gen Digital"}, "product": "norton_secure_vpn", "vendor": "gen_digital"}], "created": "2026-05-04T14:45:02.195684+00:00", "title": "Privilege Escalation During Norton Secure VPN Installation via Microsoft Store", "updated": "2026-05-04T16:05:59.205510+00:00", "vendors": ["gen_digital", "gen_digital$PRODUCT$norton_secure_vpn"]}