CVE-2025-6250 – Symantec Defendpoint Service Bypass

CVE ID : CVE-2025-6250

Published : July 28, 2025, 4:15 p.m. | 1 hour, 6 minutes ago

Description : Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper protections. Once the service is disabled, the malicious user can add themselves to Administrators group and run any process with elevated permissions.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…