CVE-2025-34489

Summary

CVE-2025-34489 is a local privilege escalation vulnerability affecting GFI MailEssentials versions prior to 21.8. An attacker can exploit this issue by sending a specially crafted serialized payload to a .NET Remoting Service, allowing them to escalate their privileges to NT Authority/SYSTEM. This vulnerability poses a significant risk to systems running the affected version of GFI MailEssentials and requires immediate attention from administrators to apply the available patch. Successful exploitation could result in unauthorized access and control over the targeted system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.