CVE-2025-58074 - Vulnerability Analysis

Overview

Norton Secure VPN contains a privilege escalation vulnerability caused by file replacement during installation via Microsoft Store, letting low-privilege users delete arbitrary files and elevate privileges, exploit requires low-privilege user access.

Severity & Score

Impact

Low-privilege users can delete arbitrary files during installation, leading to privilege escalation.

Mitigation

Update to the latest version with installation process fixes.

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2025-2276
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2276

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner