Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-34489

GFI MailEssentials < 21.8 Local Privilege Escalation

Description

GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A local attacker can escalate to NT Authority/SYSTEM by sending a crafted serialized payload to a .NET Remoting Service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GFI MailEssentials

Default version status: unaffected

  • 0 to < 21.8affected

References