Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-34109— Panda Security PSEvents.exe Insecure DLL Loading Privilege Escalation

Quick assessment

Affected
Panda Security Panda Global Protection 2016
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Panda Security Antivirus等都是西班牙熊猫安全（Panda Security）公司的产品。Panda Security Antivirus是一套杀毒软件。Panda Security Internet Security是一套基于云技术的杀毒软件。Panda Security Free Antivirus是一款免费的杀毒软件。 Panda Security多款产品存在安全漏洞，该漏洞源于DLL文件加载验证不当，可能导致任意代码执行。以下产品及版本受到影响：Panda Global Pr

AI Predicted 7.8 Difficulty: Easy EPSS 0.34% · P26

Public Exploits 1

Metasploit · 1 panda_psevents.rb [exploit]

Affected Version Matrix 4

VendorProduct Version RangeStatus
Panda Security Panda Antivirus Pro 2016 ≤ 16.1.2 affected
Panda Security Panda Global Protection 2016 ≤ 16.1.2 affected
Panda Security Panda Internet Security 2016 ≤ 16.1.2 affected
Panda Security Panda Small Business Protection ≤ 16.1.2 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-34109

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Panda Security PSEvents.exe Insecure DLL Loading Privilege Escalation
Source: CVE Program / CVE List V5
Vulnerability Description
PSEvents.exe in multiple Panda Security products runs hourly with SYSTEM privileges and loads DLL files from a user-writable directory without proper validation. An attacker with low-privileged access who can write DLL files to the monitored directory can achieve arbitrary code execution with SYSTEM privileges. Affected products include Panda Global Protection 2016, Panda Antivirus Pro 2016, Panda Small Business Protection, and Panda Internet Security 2016 (all versions up to 16.1.2).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
对搜索路径元素未加控制
Source: CVE Program / CVE List V5
Vulnerability Title
Panda Security多款产品 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Panda Security Antivirus等都是西班牙熊猫安全（Panda Security）公司的产品。Panda Security Antivirus是一套杀毒软件。Panda Security Internet Security是一套基于云技术的杀毒软件。Panda Security Free Antivirus是一款免费的杀毒软件。 Panda Security多款产品存在安全漏洞，该漏洞源于DLL文件加载验证不当，可能导致任意代码执行。以下产品及版本受到影响：Panda Global Pr
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Panda Security Panda Global Protection 2016 0 ~ 16.1.2 -
Panda Security Panda Antivirus Pro 2016 0 ~ 16.1.2 -
Panda Security Panda Small Business Protection 0 ~ 16.1.2 -
Panda Security Panda Internet Security 2016 0 ~ 16.1.2 -

II. Public POCs for CVE-2025-34109

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-34109

请登录查看更多情报信息。

Exploits & Public PoCs for CVE-2025-34109 (1)

IV. Related Vulnerabilities

Same vendor: Panda Security
Same weakness: CWE-427

V. Comments for CVE-2025-34109

No comments yet

Leave a comment