Incorrect Default Permissions in PC Time Tracer by Keiyo System
CVE-2025-46355

7HIGH

Key Information:

Vendor

Keiyo System Co., Ltd

Status
Pc Time Tracer
Vendor
CVE Published:
3 June 2025

What is CVE-2025-46355?

The vulnerability in PC Time Tracer versions prior to 5.2 arises from incorrect default permissions settings, which can be exploited by a local authenticated attacker to execute arbitrary code with SYSTEM privileges. This poses a significant risk for users running the software on Windows systems, as it potentially allows attackers to gain elevated control over the affected system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PC Time Tracer prior to 5.2

References

https://www.keiyo-system.co.jp/archives/11305
https://jvn.jp/en/jp/JVN05562338/

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.