Security Advisory

CVE-2025-10213

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-09-10 11:38:37

Last updated 2025-09-10 20:23:13

Assigner INCIBE

CVSS score 7.0

State PUBLISHED

Description

DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a dxtn.dll file of their choice in the 'C:\Users\<user>\AppData\Local\Microsoft\WindowsApps\' directory, which could lead to arbitrary code execution and persistence.

← Browse all CVEs View on cve.org ↗