Privilege Escalation in Norton Secure VPN by NortonLifeLock

CVE-2025-58074

What is CVE-2025-58074?

A privilege escalation vulnerability allows low-privilege users to exploit the Norton Secure VPN installation process via the Microsoft Store. During installation, these users can tamper with files, potentially leading to the deletion of arbitrary system files. This could ultimately allow the attacker to gain elevated privileges, compromising system integrity and potentially exposing sensitive data.

References