CVE-2025-2297 — Privilege Management for Windows - Elevation of Privilege
Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under cer…
Published: 2025-07-28 · CVSS: 7.2 · CVSS 4.0
Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to administrator.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7