Privilege Escalation Vulnerability in Wibu CodeMeter Software

CVE-2025-47809

What is CVE-2025-47809?

Wibu CodeMeter versions prior to 8.30a contain a vulnerability that permits privilege escalation immediately post-installation without requiring a system reboot. This exploit is contingent upon an unprivileged installation using User Account Control (UAC). The flaw arises when the CodeMeter Control Center component is active but has not been restarted, enabling a local user to navigate from Import License to a privileged instance of Windows Explorer. Prompt action is advisable to mitigate risks associated with this vulnerability.

References