CVE-2025-34109: Panda Security PSEvents.exe Insecure DLL Loading Privilege Escalation
PSEvents.exe in multiple Panda Security products runs hourly with SYSTEM privileges and loads DLL files from a user-writable directory without proper validation. An attacker with low-privileged access who can write DLL files to the monitored directory can achieve arbitrary code execution with SYSTEM privileges. Affected products include Panda Global Protection 2016, Panda Antivirus Pro 2016, Panda Small Business Protection, and Panda Internet Security 2016 (all versions up to 16.1.2).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34109?
CVE-2025-34109 is considered a high severity vulnerability due to its ability to allow arbitrary code execution with elevated privileges.
How do I fix CVE-2025-34109?
To fix CVE-2025-34109, update all affected Panda Security products to version 16.1.3 or later as provided by Panda Security.
What products are affected by CVE-2025-34109?
CVE-2025-34109 affects Panda Security Global Protection, Antivirus Pro, Small Business Protection, and Internet Security versions up to 16.1.2.
What is the impact of CVE-2025-34109?
The impact of CVE-2025-34109 includes potential remote code execution if an attacker can place a malicious DLL in the monitored directory.
Who can exploit CVE-2025-34109?
An attacker with low-privileged access who can write to the user-writable directory can exploit CVE-2025-34109.