An issue was discovered in K7 Ultimate Security 17.0.2045. A Local Privilege Escalation (LPE) vulnerability in the K7 Ultimate Security antivirus can be exploited by a local unprivileged user on default installations of the product. Insecure access to a named pipe allows unprivileged users to edit any registry key, leading to a full compromise as SYSTEM.
References
| Link | Resource |
|---|---|
| https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-22nd-Dec-2025 | Vendor Advisory |
| https://www.k7computing.com/ | Product |
Configurations
History
02 Jan 2026, 15:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-22nd-Dec-2025 - Vendor Advisory | |
| References | () https://www.k7computing.com/ - Product | |
| First Time |
K7computing
K7computing k7 Ultimate Security |
|
| CPE | cpe:2.3:a:k7computing:k7_ultimate_security:17.0.2045:*:*:*:*:*:*:* |
22 Dec 2025, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-269 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.7 |
22 Dec 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-22 15:16
Updated : 2026-01-02 15:53
NVD link : CVE-2025-67826
Mitre link : CVE-2025-67826
CVE.ORG link : CVE-2025-67826
JSON object : View
Products Affected
k7computing
- k7_ultimate_security
CWE
CWE-269
Improper Privilege Management