CVE-2025-46355

HIGH

PC Time Tracer < 5.2 - Authenticated Arbitrary Code Execution via Incorrect Default Permissions

Title source: llm

Description

Incorrect default permissions issue in PC Time Tracer prior to 5.2. If exploited, arbitrary code may be executed with SYSTEM privilege on Windows system where the product is running by a local authenticated attacker.

References (2)

Core 2

Core References

Various Sources

https://www.keiyo-system.co.jp/archives/11305

Third Party Advisory

https://jvn.jp/en/jp/JVN05562338/

Scores

CVSS v3 7.3

EPSS 0.0014

EPSS Percentile 3.3%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-276

Status published

Products (1)

Keiyo System Co., LTD/PC Time Tracer prior to 5.2

Published Jun 03, 2025

Tracked Since Feb 18, 2026