CVE-2025-37735

HIGH

Elastic Defend - Privilege Escalation

Title source: llm

Description

Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service running as SYSTEM. In some cases, this could result in local privilege escalation.

References (1)

Scores

CVSS v3 7.0
EPSS 0.0002
EPSS Percentile 4.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-281
Status draft

Timeline

Published Nov 06, 2025
Tracked Since Feb 18, 2026