ZDI-CAN-27004
HIGH 7.3
Overdue
May 29, 2025
Glarysoft
Glarysoft is a well-known developer of system optimization and cleaning utilities for Windows. This vulnerability requires local access with low privileges and user interaction, but if exploited successfully grants attackers high-impact capabilities including data theft, system modification, and denial of service. Security teams should monitor for suspicious activity from low-privileged local accounts and prepare patches ahead of the September 26 vendor deadline.
Advisory Details
Researcher
Discovered by:
Sharkkcode and Zeze with TeamT5
Reported
May 29, 2025
Deadline
September 26, 2025
202d overdue
CVSS Vector
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H