ZDI-CAN-26240: ZDI-25-590: G DATA Total Security GDTunerSvc Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-2790.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-26240?
ZDI-CAN-26240 is classified as a moderate severity vulnerability due to its potential to allow local privilege escalation.
How do I fix ZDI-CAN-26240?
To fix ZDI-CAN-26240, update G DATA Total Security to the latest version that addresses this privilege escalation vulnerability.
Who is affected by ZDI-CAN-26240?
ZDI-CAN-26240 affects users of G DATA Total Security who have local access to execute low-privileged code.
What type of vulnerability is ZDI-CAN-26240?
ZDI-CAN-26240 is a local privilege escalation vulnerability.
What is the exploit requirement for ZDI-CAN-26240?
Exploitation of ZDI-CAN-26240 requires an attacker to already have the ability to execute low-privileged code on the target system.