Local Privilege Escalation Vulnerability in IBM Personal Communications
CVE-2025-1095

8.8HIGH

Key Information:

Vendor

IBM
Status
Personal Communications
Vendor
CVE Published:
8 April 2025

What is CVE-2025-1095?

IBM Personal Communications versions 14 and 15 are affected by a local privilege escalation vulnerability caused by an incomplete fix from a prior issue. This flaw allows any user with interactive access to the system to execute commands with elevated privileges, effectively granting them unauthorized access to the NT AUTHORITY\SYSTEM context. Such elevation could lead to significant security risks, including full control over the affected systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Personal Communications v14

Personal Communications v15

References

https://www.ibm.com/support/pages/node/7230335
vendor-advisorypatch

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.