CVE-2025-58074: Gen Digital Norton Secure VPN

High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store. A low-privilege user can replace files during the installation process, which may result in deletion of arbitrary files that can lead to elevation of privileges.

Affected products

Published 2026-05-04. Last modified 2026-10-07.