jvn.jp
https://jvn.jp/jp/JVN40102375 CVE-2025-64701
HIGH
Record summary
CVE-2025-64701 has a selected CVSS score of 8.5 (high).
Description
QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability, which may allow a user who can log in to a Windows system with the affected product to gain administrator privileges. As a result, sensitive information may be accessed or altered, and arbitrary actions may be performed.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 11, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
QND Premium/Advance/StandardBrowse QualitySoft Corporation / QND Premium/Advance/Standard | CVE List | Ver.11.0.9i and prior | affected |
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-64701 qualitysoft.com
https://www.qualitysoft.com/product/qnd_vulnerabilities_2025