CVE-2025-60865
Insecure Permissions in Avanquest Driver Updater Enables Privilege Escalation
Publication date: 2026-02-03
Last updated on: 2026-02-10
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| avanquest | pc_helpsoft_driver_updater | 9.1.57803.1174 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-284 | The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability be detected on my network or system? Can you suggest some commands?
[{'type': 'paragraph', 'content': 'The vulnerability exists in the avanquest Driver Updater version 9.1.57803.1174, specifically in the Driver Updater Service Windows component. Detection involves verifying if this specific software and version is installed on your system.'}, {'type': 'paragraph', 'content': 'You can check for the presence and version of the Driver Updater software by using system commands to list installed programs or services.'}, {'type': 'list_item', 'content': "On Windows, use PowerShell to check installed programs: Get-WmiObject -Class Win32_Product | Where-Object { $_.Name -like '*Driver Updater*' }"}, {'type': 'list_item', 'content': 'Alternatively, check running services for the Driver Updater Service: sc queryex type= service state= all | findstr /I "Driver Updater"'}, {'type': 'list_item', 'content': 'You can also check the file system for the Driver Updater executable and check its version by right-clicking the executable and viewing properties or using command line tools.'}] [1, 2]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include removing or disabling the vulnerable Driver Updater software version 9.1.57803.1174 to prevent local attackers from exploiting the insecure permissions.
If an update or patch is available from Avanquest or PC HelpSoft, apply it immediately to fix the insecure permissions issue.
Restrict local user permissions to prevent unauthorized access to the Driver Updater Service component.
Monitor your system for unusual privilege escalation attempts related to this service.
Can you explain this vulnerability to me?
This vulnerability is an Insecure Permissions issue found in avanquest Driver Updater version 9.1.57803.1174. It allows a local attacker to escalate their privileges by exploiting the Driver Updater Service component on Windows.
How can this vulnerability impact me? :
The vulnerability can allow a local attacker to gain higher privileges on the affected system. This means the attacker could potentially execute actions or access data that normally require elevated permissions, leading to unauthorized control or changes on the system.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know