CVE-2025-34489

No fix known EPSS <1%CVSS 7.8

GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A local attacker can escalate to NT Authority/SYSTEM by sending a crafted serialized payload to a .NET Remoting Service.

Published 2025-04-28 · CVE record · OSV

Products: gfi mailessentials