CVE-2025-0543: G Data Cyberdefense AG G Data Security Client

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in execution by the SetupSVC.exe service in the context of SYSTEM.

Affected products

• G Data Cyberdefense AG G Data Security Client: before 15.8.333 (fixed in 15.8.333)

Published 2025-01-25. Last modified 2026-06-17.