CVE-2025-0567CWE-426

Epic Games Launcher Installer profapi.dll untrusted search path

Low · published January 19, 2025

CVSS v4.0
2.0
EPSS
0%
Percentile
8.9
In the wild
Unconfirmed
What it is

A vulnerability classified as problematic was found in Epic Games Launcher up to 17.2.1. This vulnerability affects unknown code in the library profapi.dll of the component Installer. The manipulation leads to untrusted search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation appears to be difficult.

The record
Technical detail
CVSS v4.0
2.0 · LOW
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00196 · 8.9th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2025-01-19T07:31Z
EPSS history
Timeline
  • 19 JAN 07:31Z
    Epic Games Launcher Installer profapi.dll untrusted search path
    cvelistv5