Description
Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems.
Published: 2026-09-25
Score: 7.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Privilege Escalation
Action: Apply Patch
AI Analysis

Impact

A kernel‑mode driver in Seclore FileSecure Desktop Client before version 3.25.1.0 allows an authenticated local user to access protected kernel functions, resulting in an escalation of privileges to NT AUTHORITY\SYSTEM. This flaw enables the attacker to run any code with system level rights, thereby compromising the entire system and all data it hosts.

Affected Systems

The vulnerability exists in Seclore FileSecure Desktop Client predecessors to version 3.25.1.0, running on Windows operating systems. Users of the desktop client who have not applied the 3.25.1.0 or later update are affected.

Risk and Exploitability

The CVSS score of 7.8 indicates a high severity, and though EPSS is not available, the local authenticated nature of this flaw makes it a realistic threat for users with sufficient access. The vulnerability is not listed in the CISA KEV catalog, but its potential to grant full system control warrants immediate attention. Attackers must be authenticated locally; once they are, compromisation of system privileges can occur without additional conditions.

Generated by OpenCVE AI on September 26, 2026 at 00:07 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update Seclore FileSecure Desktop Client to version 3.25.1.0 or newer.
  • If an update cannot be applied immediately, disable the vulnerable kernel‑mode driver via the driver manager or system configuration tools.
  • Restrict local user accounts to the least privilege by auditing permissions and removing unnecessary write access to the driver components.

Generated by OpenCVE AI on September 26, 2026 at 00:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 26 Sep 2026 00:30:00 +0000

Type Values Removed Values Added
Title Improper Access Control in Seclore FileSecure Desktop Client Allows Local Privilege Escalation

Fri, 25 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-269
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Fri, 25 Sep 2026 13:00:00 +0000

Type Values Removed Values Added
Description Seclore FileSecure Desktop Client before 3.25.1.0 contains improper access control vulnerability in the kernel-mode driver component that allows an authenticated local user to gain elevated privileges to NT AUTHORITY\SYSTEM on affected systems.
References

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-09-25T15:57:18.051Z

Reserved: 2026-08-25T00:00:00.000Z

Link: CVE-2026-79153

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-09-25T13:17:16.297

Modified: 2026-09-30T17:32:07.107

Link: CVE-2026-79153

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-26T00:15:16Z

Weaknesses
  • CWE-269

    Improper Privilege Management