T4rantell

## CVE-2025-45095-Lavasoft-WebCompanion.md

      
        
          
            
              
              1 file
            
          
          
            
              
              0 forks
            
          
            
              
                
                0 comments
              
            
          
            
              
              0 stars
            
          
        
        
          
              
          
          
            
                T4rantell
                / CVE-2025-45095-Lavasoft-WebCompanion.md
            
            
              Last active
              October 8, 2025 18:41
            
          
        
      
        
  
      
    Security Advisory: Unquoted Service Path in Lavasoft Web Companion

CVE-2025-45095

Summary

Lavasoft Web Companion (also known as Ad-Aware WebCompanion) versions 8.9.0.1091 through 12.1.3.1037 contains an unquoted service path vulnerability in the DCIService component, allowing local attackers to escalate privileges.
Details