CVE-2025-36384Disclosure(ibm / db2)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

IBM Db2 for Windows 12.1.0 - 12.1.3 could allow a local user with filesystem access to escalate their privileges due to the use of an unquoted search path element.

ibm CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://www.ibm.com/support/pages/node/7257678

Weakness type (CWE)

CWE-428

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

Threat summary

5 mentions across 3 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 2d ago at 2 mentions (2026-01-30); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

ibm

Products

db2

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-01-30	2	Disclosure2
2026-01-31	2	Disclosure2
2026-02-05	1	General1

Full discourse5 posts

VulDB 🛡@vuldb251d
Disclosure
A severe vulnerability was disclosed for IBM DB2 (CVE-2025-36384) https://vuldb.com/?id.343553
Post summary
A severe vulnerability in IBM DB2 (CVE‑2025‑36384) has been publicly disclosed, with details available on vuldb.com.
10000124
2.1K followersView on X
CERT-PY@CERTpy245d
General
⚠️ Vulnerabilidades en productos IBM ❗ CVE-2025-36384 ❗ CVE-2025-36184 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-ibm-3/ https://t.co/INsWaIExTt
Post summary
The tweet lists two IBM product CVEs and links to an external site for additional information, without providing specifics on the vulnerability, exploitation, or remediation.
00000109
6.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds251d
Disclosure
CVE-2025-36384 Local Privilege Escalation in IBM Db2 for Windows via Unquoted Search Path https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-36384
Post summary
The post discloses CVE-2025-36384, describing a local privilege escalation issue in IBM Db2 for Windows caused by an unquoted search path; it provides no PoC, exploit, patch, or evidence of active exploitation.
0000093
4.0K followersView on X
The Hacker Wire@TheHackerWire251d
Disclosure
🟠 CVE-2025-36384 - High IBM Db2 for Windows 12.1.0 - 12.1.3 could allow a local user with filesystem access to escalate their privileges due to the use of an unquoted search path element. https://www.thehackerwire.com/vulnerability/CVE-2025-36384/ https://t.co/mQ89Fd55Ir
Post summary
IBM Db2 for Windows versions 12.1.0 to 12.1.3 are vulnerable to a local privilege escalation through an unquoted search path element, as described in the CVE-2025-36384 announcement, with no reported exploitation or patch information.
0000058
113 followersView on X
CVE@CVEnew251d
Disclosure
CVE-2025-36384 IBM Db2 for Windows could allow a local user with filesystem access to escalate their privileges due to the use of an unquoted search path element. https://www.cve.org/CVERecord?id=CVE-2025-36384
Post summary
IBM Db2 for Windows contains a privilege‑elevation flaw where a local user with filesystem access can exploit an unquoted search path element to gain higher privileges.
00000152
56.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ibm	db2	-	windows	-

Explore more

Back to dashboard ibm CVEs db2 vulnerabilities

What researchers are saying

CVE-2025-36384

VulDB 🛡@vuldbDisclosure

A severe vulnerability in IBM DB2 (CVE‑2025‑36384) has been publicly disclosed, with details available on vuldb.com.

CERT-PY@CERTpyGeneral

The tweet lists two IBM product CVEs and links to an external site for additional information, without providing specifics on the vulnerability, exploitation, or remediation.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post discloses CVE-2025-36384, describing a local privilege escalation issue in IBM Db2 for Windows caused by an unquoted search path; it provides no PoC, exploit, patch, or evidence of active exploitation.

The Hacker Wire@TheHackerWireDisclosure

IBM Db2 for Windows versions 12.1.0 to 12.1.3 are vulnerable to a local privilege escalation through an unquoted search path element, as described in the CVE-2025-36384 announcement, with no reported exploitation or patch information.

CVE@CVEnewDisclosure

IBM Db2 for Windows contains a privilege‑elevation flaw where a local user with filesystem access can exploit an unquoted search path element to gain higher privileges.