CVE-2025-68947 MEDIUM

CVE-2025-68947: NSecsoft NSecKrnl process termination privilege escalation

Vendor Nsecsoft

Product NSecKrnl

Weakness CWE-862 · Missing authorization

Published January 13, 2026

Last update March 10, 2026

View on NVD All CVEs

CVSS base score

4.7/10

Attack vector Local

Attack complexity High

Privileges required Low

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

NSecsoft 'NSecKrnl' is a Windows driver that allows a local, authenticated attacker to terminate processes owned by other users, including SYSTEM and Protected Processes by issuing crafted IOCTL requests to the driver.

Key dates

02Disclosure timeline

January 13, 2026 CVE published

March 10, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-68947 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/862.html

Related vulnerabilities

04Related CVE

CVE-2025-66121 WordPress SiteGround Security plugin <= 1.5.8 - Broken Access Control vulnerability CVE-2026-27374 WordPress WooCommerce Order Details plugin <= 3.1 - Broken Access Control vulnerability CVE-2024-27190 WordPress Download Media plugin <= 1.4.2 - Broken Access Control vulnerability CVE-2025-67568 WordPress Basel theme <= 5.9.1 - Broken Access Control vulnerability CVE-2024-31983 XWiki Platform: Remote code execution from edit in multilingual wikis via translations