CVE-2025-14492: RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the SAS Core Service. The issue results from an exposed dangerous function. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-27668.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14492?
CVE-2025-14492 is classified as a local privilege escalation vulnerability.
How do I fix CVE-2025-14492?
To fix CVE-2025-14492, update RealDefense SUPERAntiSpyware to the latest version that addresses this vulnerability.
Who is affected by CVE-2025-14492?
CVE-2025-14492 affects installations of RealDefense SUPERAntiSpyware on local machines.
What type of attacks can CVE-2025-14492 facilitate?
CVE-2025-14492 can allow local attackers to escalate their privileges on affected systems.
Is there a workaround for CVE-2025-14492?
No known workaround exists for mitigating the effects of CVE-2025-14492 other than applying the available software updates.