NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks.
References
| Link | Resource |
|---|---|
| https://cve.naver.com/detail/cve-2025-58322.html | Vendor Advisory |
Configurations
History
16 Oct 2025, 19:14
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
cpe:2.3:a:navercorp:mybox:*:*:*:*:*:windows:*:* |
12 Sep 2025, 16:18
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:navercorp:mybox:*:*:*:*:*:*:*:* | |
| First Time |
Navercorp
Navercorp mybox |
09 Sep 2025, 18:43
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Microsoft windows
Naver Microsoft Naver mybox |
|
| CPE | cpe:2.3:a:naver:mybox:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
| References | () https://cve.naver.com/detail/cve-2025-58322.html - Vendor Advisory |
29 Aug 2025, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) NAVER MYBOX Explorer for Windows before 3.0.8.133 allows a local attacker to escalate privileges to NT AUTHORITY\SYSTEM by invoking arbitrary DLLs due to improper privilege checks. |
28 Aug 2025, 15:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
28 Aug 2025, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-08-28 08:15
Updated : 2025-10-16 19:14
NVD link : CVE-2025-58322
Mitre link : CVE-2025-58322
CVE.ORG link : CVE-2025-58322
JSON object : View
Products Affected
navercorp
- mybox
CWE
CWE-266
Incorrect Privilege Assignment