Privilege Escalation Vulnerability in NeacSafe64 Driver by NetEase
CVE-2025-45737

6.5MEDIUM

Key Information:

Vendor

NetEase

Status
NeacSafe64 Driver
Vendor
CVE Published:
27 June 2025

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-45737?

A vulnerability exists in the NeacSafe64 Driver developed by NetEase, allowing attackers to gain elevated privileges. By crafting and sending specific IOCTL commands to the NeacSafe64.sys component, adversaries can exploit this weakness to manipulate system operations and gain unauthorized access. This potential exposure emphasizes the need for timely updates and robust system security practices to mitigate risks associated with malicious attempts.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-45737
Created by Shinn-Home

References

https://github.com/za233/NeacController

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.