VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 10, 2025· Updated Sep 10, 2025

DLL search path hijacking vulnerability

CVE-2025-10213

Description

DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by placing a dxtn.dll file of their choice in the 'C:\Users\\AppData\Local\Microsoft\WindowsApps\' directory, which could lead to arbitrary code execution and persistence.

Affected products

2
  • UPDF/UPDFllm-fuzzy
    Range: = 1.8.5.0
  • UPDF/UPDFv5
    Range: 1.8.5.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.