CVE-2025-58074highCWE-1386

CVE-2025-58074: high-severity vulnerability in Gen Digital Norton Secure VPN

Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store

Published · Updated

Follow this CVE+ Monitor Norton Secure VPN

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.1%
In short

During Norton Secure VPN installation from Microsoft Store, a regular user can replace files to delete arbitrary files and gain admin privileges. This happens because the installation process doesn't properly protect files from being tampered with.

Technical detail

A file replacement vulnerability exists during Norton Secure VPN installation via Microsoft Store (CWE-1386: Improper Validation of Specified Quantity in Input). A low-privilege user can intercept and modify files during installation, enabling arbitrary file deletion that escalates privileges to system level. The vulnerability requires local access and occurs within the installation window.

Summary generated and translated by AI from the official description.
A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Gen Digital · Norton Secure VPN