CVE-2025-49797
- State
- Published
- Severity
- 8.5 High
- Published
- Jun 25, 2025
- Updated
- Aug 19, 2025
- Reserved
- Jun 11, 2025
Description
Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary program may be executed with the administrative privilege. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | jpcert |
| 3.0 | 7.8 High | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | jpcert |
Weaknesses
- CWE-552 Files or directories accessible to external parties
Affected Products
| Product | Versions |
|---|---|
Multiple driver installers for WindowsBROTHER INDUSTRIES, LTD. |
|
Multiple driver installers for WindowsToshiba Tec Corporation |
|
Multiple driver installers for WindowsRicoh Company, Ltd. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.