CVE-2024-25029

IBM Personal Communications (PCOMM) v14.x–v15.x is vulnerable to remote code execution and local privilege escalation via a Windows service, allowing an unauthenticated network attacker to execute commands with SYSTEM privileges due to an incomplete fix for CVE-2024-25029. Supported affected vers...

CVE-2025-1095

IBM Personal Communications v14.x and v15.x contain a Windows service vulnerable to local privilege escalation (LPE) where interactively logged-in users can execute commands with NT AUTHORITY\SYSTEM privileges. This is due to an incomplete fix for CVE-2024-25029. IBM provides remediation through ...

CVE-2016-0321

IBM PCOMM (IBM Personal Communications) versions 6.0 prior to 6.0.17 and 12.0 prior to 12.0.0.1 are affected by a design flaw that allows a local attacker with access to a victim account to retrieve passwords by running a PowerShell script. The vulnerability occurs when credential extraction is n...

CVE-2012-0201

IBM Personal Communications WorkStation (pcspref.dll) is affected by a stack-based buffer overflow when processing WorkStation files (.ws). Affected versions are IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4; exploitation via a long profile string in a WorkStation file cou...