CVE-2018-25044

MEDIUM

uTorrent - Unauthenticated Privilege Escalation via Guest Account

Title source: llm

Description

A vulnerability, which was classified as critical, has been found in uTorrent. This issue affects some unknown processing of the component Guest Account. The manipulation leads to privilege escalation. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

References (3)

Core 3

Core References

Exploit, Issue Tracking, Mailing List, Third Party Advisory x_refsource_misc

https://bugs.chromium.org/p/project-zero/issues/detail?id=1524

Third Party Advisory x_refsource_misc

http://www.math.sci.hiroshima-u.ac.jp/~m-mat/MT/efaq.html

Exploit, Third Party Advisory, VDB Entry x_refsource_misc

https://vuldb.com/?id.113807

Scores

CVSS v3 6.3

EPSS 0.0091

EPSS Percentile 55.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-269

Status published

Products (1)

bittorrent/utorrent

Published Jun 17, 2022

Tracked Since Feb 18, 2026