Vulnerability Database

321,672

Total vulnerabilities in the database

CVE-2019-25283

Shrew Soft VPN Client 2.2.2 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can place malicious executables in the unquoted service path to gain elevated access during service startup or system reboot.

  • Published: Feb 5, 2026
  • Updated: Feb 6, 2026
  • CVE: CVE-2019-25283
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

No affected software listed.