CVE-2025-4769CWE-426CWE-427

CBEWIN Anytxt Searcher ATService.exe uncontrolled search path

High · published May 16, 2025

CVSS v4.0
7.3
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

A vulnerability classified as critical was found in CBEWIN Anytxt Searcher 1.3.1128.0. This vulnerability affects unknown code of the file ATService.exe. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult.

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00193 · 8.5th percentile
Weaknesses
CWE-426 · Untrusted Search Path; CWE-427 · Uncontrolled Search Path Element
Published
2025-05-16T10:39Z
EPSS history
Timeline
  • 16 MAY 10:39Z
    CBEWIN Anytxt Searcher ATService.exe uncontrolled search path
    cvelistv5