CVE-2025-14496: RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the SAS Core Service. The issue results from an exposed dangerous function. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-27678.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14496?
CVE-2025-14496 has a high severity rating due to its potential to allow local privilege escalation.
How do I fix CVE-2025-14496?
To fix CVE-2025-14496, ensure that your RealDefense SUPERAntiSpyware is updated to the latest version provided by the vendor.
Who does CVE-2025-14496 affect?
CVE-2025-14496 affects users of RealDefense SUPERAntiSpyware who have not applied the necessary updates.
What types of attacks are possible with CVE-2025-14496?
CVE-2025-14496 allows local attackers to escalate their privileges, potentially compromising the system.
Is CVE-2025-14496 being actively exploited?
As of now, there is no public information indicating that CVE-2025-14496 is being actively exploited in the wild.