Elevation of Privileges Vulnerability in Altiris Core Agent by Broadcom

CVE-2025-9059

What is CVE-2025-9059?

The Altiris Core Agent Updater package (AeXNSC.exe) is vulnerable to an elevation of privileges through DLL hijacking. This flaw allows an attacker to execute arbitrary code with elevated permissions if they can trick the application into loading a malicious DLL. Proper measures should be taken to update affected systems to mitigate this risk.

References