Ghostwire

CVE-2025-58074: A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A...

HIGH CVSS 7.5

Published: May 4, 2026 | Last Modified: May 4, 2026

Description

A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (2 articles)

References