Vulnerability in Beyondtrust Privilege Management For Windows

CVE-2025-0889

Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain circumstances where an EPM policy allows for automatic priv…

EPSS: 0.000 (10.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References