PM
Product
Privilege management for Windows
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 9Medium 3Low 1
Watch
Add Privilege management for Windows to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-12613 | 8.8 | Dec 11 | An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6 Affected: through 5.6 |
| CVE-2025-2297 | 7.8 | Jul 28 | Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under… Affected: before 25.4.270 |
| CVE-2025-0889 | 7.8 | Feb 26 | Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain… Affected: before 25.2 |
| CVE-2024-25083 | 7.8 | Feb 16 | An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1 Affected: before 24.1 |
| CVE-2020-28369 | 7.8 | Dec 12 | In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp Affected: through 5.7 |
| CVE-2020-12614 | 7.8 | Dec 12 | An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6 Affected: through 5.6 |
| CVE-2020-12612 | 7.8 | Dec 12 | An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6 Affected: before 5.6; 5.6 |
| CVE-2020-12615 | 7.8 | Dec 12 | An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6 Affected: before 5.6; 5.6 |
| CVE-2021-42254 | 7.8 | Nov 19 | BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions Affected: before 21.6 |
| CVE-2026-1232 | 6.8 | Feb 2 | Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows Affected: through 25.7 |
| CVE-2025-6250 | 6.7 | Jul 28 | Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper protections Affected: before 25.4.270 |
| CVE-2023-49944 | 6.7 | Dec 25 | The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypass this feature by decrypting the shared… Affected: before 2023-07-14 |
| CVE-2024-1591 | 3.3 | Feb 16 | Prior to version 24.1, a local authenticated attacker can view Sysvol when Privilege Management for Windows is configured to use a GPO policy Affected: before 24.1 |
Showing 13