VULNERABILITY INTELLIGENCE
CVE-2025-64695
CVSS score8.4 HIGH
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-11-21
Last modified2026-10-07
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows). If exploited, arbitrary code may be executed with the privilege of the user invoking the installer.
Weakness classification
- CWE-427: Uncontrolled Search Path Element
Primary references
- vultures@jpcert.or.jp — Third Party Advisory
- vultures@jpcert.or.jp — Vendor Advisory