Approved changes feed: RSS · Atom

cpe:2.3:a:opswat:metadefender_endpoint_security_sdk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpswat (14b1e6fa-4a28-5900-ac27-86d6e1dab9a6)
ProductMetadefender Endpoint Security Sdk (dd8cea3e-5dcf-5bca-a9b4-a2ee9bc7be55)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-0131 vulnerable 2026-06-08 07:00:29.574435 GlobalProtect App: Incorrect Privilege Management Vulnerability in OPSWAT MetaDefender Endpoint Security SDK
An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user also successfully exploits a race condition, which makes this vulnerability difficult to exploit.
Published: 2025-05-14T18:06:45.870Z
Updated: 2026-02-26T18:28:08.560Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.