Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. If exploited, an arbitrary program may be executed with administrative privileges. For details on affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under References.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.5 | CVE-2025-49797 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system where the Brother driver is installed. By executing a specially crafted program, the attacker can gain administrative privileges, allowing them to perform unauthorized actions on the system.
Affected Products
- Brother driver installers for Windows – Multiple versions are affected, allowing for privilege escalation.
Mitigation
Users are advised to update their Brother drivers to the latest versions provided by the vendor. Additionally, restricting local access to systems with vulnerable drivers can help mitigate the risk of exploitation.