What’s Vulnerable › Vulnerabilities

CVE-2025-64701

• Severity: high (CVSS 8.5 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-11 · updated 2026-10-08
• Weakness: CWE-268

Description

QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability, which may allow a user who can log in to a Windows system with the affected product to gain administrator privileges. As a result, sensitive information may be accessed or altered, and arbitrary actions may be performed.

Affected products

• QualitySoft Corporation QND Premium/Advance/Standard: through Ver.11.0.9i

References

• https://jvn.jp/jp/JVN40102375/
• https://www.qualitysoft.com/product/qnd_vulnerabilities_2025/

Get alerted when CVE-2025-64701 or the next vulnerability affects your stack