CVEvulnerability

CVE-2025-37735

7.0 HIGH Published 2025-11-06 Modified 2026-10-07 Official page ↗
Status
Deferred
Published
2025-11-06
Last modified
2026-10-07
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-281

Description

Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service running as SYSTEM. In some cases, this could result in local privilege escalation.

Related

Weakness · CWE (1)

  • CWE-281 Improper Preservation of Permissions weakness

References