CVE-2025-35978
Medium
Description
Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1.4 L10 to L33 and UpdateNaviInstallService Service 1.2.0091 to 1.2.0125. If a local authenticated attacker send malicious data, an arbitrary registry value may be modified or arbitrary code may be executed.
SeverityMedium
CVSS6.9
Exploit probability—
ProductUpdateNavi
PublishedJun 12, 2025
First seenJun 12, 2025
Weakness typeCWE-923CWE-923
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Fujitsu Client Computing Limited UpdateNavi | V1.4 L10 to L33 | — |
| Fujitsu Client Computing Limited UpdateNaviInstallService | Service 1.2.0091 to 1.2.0125 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.