CVE-2025-10714CWE-428

CVE-2025-10714

High · published November 11, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
2.2
In the wild
Unconfirmed
What it is

🚨 A sneaky unquoted search path vulnerability lurks within AXIS Optimizer, waiting for the right moment to pounce! ⚡ Think of this like having a restaurant that doesn't specify which chef is preparing the meal, leading to surprise ingredients being used — not ideal for anyone expecting a safe dish! If an attacker gains access to a local Windows machine with admin rights, they could potentially escalate their privileges, leading to unauthorized control of the system. This means they could manipulate settings, access sensitive data, or even disable security measures — a downright disaster!

Put simply

Think of this like having a restaurant that doesn't specify which chef is preparing the meal, leading to surprise ingredients being used — not ideal for anyone expecting a safe dish! This vulnerability allows a malicious user with sufficient privileges to exploit the unquoted search path, which could enable them to run arbitrary code with elevated permissions on the system.

What to do

If an attacker gains access to a local Windows machine with admin rights, they could potentially escalate their privileges, leading to unauthorized control of the system. This means they could manipulate settings, access sensitive data, or even disable security measures — a downright disaster! To remediate this, ensure that the AXIS Optimizer installation path is properly quoted. Additionally, review user permissions to limit access and ensure only trusted users can write data to installation directories. Regularly update to the latest version as patches may be released. You've got this! Follow these steps and secure your system like a pro! 🛡️

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00128 · 2.2th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2025-11-11T13:15Z
References (1)
EPSS history
Timeline
  • 11 NOV 07:16Z
    AXIS Optimizer was vulnerable to an unquoted search path vulnerability, which could potentially lead to privilege escalation within Microsoft Windows operating…
    cvelistv5