Orca G2 vulnerabilities

2 known vulnerabilities in Orca G2 from Sevencs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Ec2007 Kernel: Incorrect Permission Assignment for Critical Resource

  CVE-2025-64699Dec 31, 2025Sevencs

  An incorrect NULL DACL issue exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The regService process, which runs with SYSTEM privileges, applies a Security Descriptor to a device object with no explicitly configured DACL. This condition could allow an

• 7.0 High severity

  Ec2007 Kernel: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2025-61037Dec 31, 2025Sevencs

  A local privilege escalation vulnerability exists in SevenCs ORCA G2 2.0.1.35 (EC2007 Kernel v5.22). The flaw is a Time-of-Check Time-of-Use (TOCTOU) race condition in the license management logic. The regService process, which runs with SYSTEM privileges, cre