CVE-2025-70888
March 25, 2026
An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component
Affected Packages
https://github.com/mtrojnar/osslsigncode.git (GITHUB):
Affected version(s) >=2.0 <2.11Fix Suggestion:
Update to version 2.11https://github.com/mtrojnar/osslsigncode.git (GITHUB):
Affected version(s) >=2.0 <2.11Fix Suggestion:
Update to version 2.11https://github.com/mtrojnar/osslsigncode.git (GITHUB):
Affected version(s) >=2.0 <2.11Fix Suggestion:
Update to version 2.11Related Resources (3)
Do you need more information?
Contact UsCVSS v3
Base Score:
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE
Weakness Type (CWE)
Improper Privilege Management
EPSS
Base Score:
0.10
