High severity · published Jun 25, 2025
CVE-2025-49797
Multiple Brother driver installers for Windows contain a privilege escalation vulnerability
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary program may be executed with the administrative privilege. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 7% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MD
Multiple driver installers for Windows · BROTHER INDUSTRIES, LTD.
see the information provided by the vendor · source: vendor
Affected product
MD
Multiple driver installers for Windows
BROTHER INDUSTRIES, LTD.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-49797
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-49797
jvn.jp
https://jvn.jp/en/vu/JVNVU91819309/
support.brother.com
https://support.brother.com/g/s/security/
www.ricoh.com
https://www.ricoh.com/products/security/vulnerabilities/vul?id=ricoh-2025-000009
www.toshibatec.com
https://www.toshibatec.com/information/20250625_01.html
