CVE-2025-64699

The electronic charting system SevenCs ORCA G2 version 2.0.1.35 (EC2007 Kernel v5.22) is vulnerable to an incorrect NULL DACL issue. The regService process, which runs with SYSTEM privileges , applies a Security Descriptor to a device object without an explicitly configured DACL. This flaw could ...