What’s Vulnerable › Vulnerabilities

CVE-2025-63945

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-02-23 · updated 2026-06-17
• Weakness: CWE-59

Description

A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.

Affected products

• Tencent Ioa: before 210.9.28693.62001 — fixed in 210.9.28693.62001

How to fix

Upgrade to a fixed version: Tencent Ioa 210.9.28693.62001. Check the vendor advisory for mitigations.

References

• https://github.com/alexlee820/CVE-2025-63945-Tencent-iOA-EoP
• https://github.com/alexlee820/Tencent-iOA-EoP

Get alerted when CVE-2025-63945 or the next vulnerability affects your stack