LPE in something called "K7 Ultimate Security" seems too predictable these days.

https://support.k7computing.com/index.php?/selfhelp/view-article/Advisory-issued-on-22nd-Dec-2025

@cR0w This one by @quarkslab may cover the details, although the CVE is not mentioned: https://blog.quarkslab.com/k7-antivirus-named-pipe-abuse-registry-manipulation-and-privilege-escalation.html

@buherator @quarkslab Thanks! That's a good write-up. I like that it explains thought process instead of just "here's all the nerd shit."

@cR0w @buherator at the time of publication of the blog post no CVE had been assigned. K7 published theiir advisory and notified us of the assigned CVE ID today.

@quarkslab Thanks for the confirmation!

@cR0w