Privilege Escalation Vulnerability in Tencent iOA App for Windows Devices
CVE-2025-63945

7.4HIGH

Key Information:

Vendor

Tencent

Status
iOA App
Vendor
CVE Published:
23 February 2026

What is CVE-2025-63945?

A vulnerability exists in the Tencent iOA app that allows a local user on Windows devices to execute programs with elevated privileges. This occurs through a race condition, which must be successfully exploited by the user. The issue affects specific versions of the app and raises security concerns regarding unauthorized access to system resources.

References

https://github.com/alexlee820/Tencent-iOA-EoP
https://github.com/alexlee820/CVE-2025-63945-Tencent-iOA-EoP

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.