---
id: CVE-2025-67781
title: >-
  An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7,
  and 25.1 before 25.1.5
summary: >-
  An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7,
  and 25.1 before 25.1.5. Local unprivileged users can manipulate privileged
  processes to gain more privileges on Windows computers.
severity: critical
cvss: 9.9
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H'
cwe:
  - CWE-269
vendor: drivelock
product: drivelock
affected:
  - 'drivelock >= 24.1, < 24.1.6'
  - 'drivelock >= 24.2, < 24.2.7'
  - 'drivelock >= 25.1, < 25.1.5'
patched:
  - drivelock 25.1.5
published: '2025-12-17'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T11:10:00.203'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-67781'
references:
  - url: 'https://drivelock.help/en-us/Content/Home.htm'
    label: cve@mitre.org
tags:
  - nvd
epss: 0.00276
epssPercentile: 0.18441
ingestedAt: '2026-10-13T11:23:51.125Z'
---

## Overview

An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5. Local unprivileged users can manipulate privileged processes to gain more privileges on Windows computers.

## Affected

- `drivelock >= 24.1, < 24.1.6`
- `drivelock >= 24.2, < 24.2.7`
- `drivelock >= 25.1, < 25.1.5`

## Remediation

Upgrade past the affected range:

- `drivelock 25.1.5`