CVE-2025-0889 — Privilege Management for Windows – Elevation of Privilege

CVE-2025-0889

Privilege Management for Windows – Elevation of Privilege PUBLISHED

Description (CNA)

Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic privilege elevation of a user process.

Affected (CNA)

Vendor / product	Versions
BeyondTrust / Privilege Management for Windows	affected 0 before 25.2

CWE

CWE-268

References

https://www.beyondtrust.com/trust-center/security-advisories/bt25-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.