CVE-2025-52541CWE-427

A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary code execution

High · published February 11, 2026

CVSS v3.1
7.3
EPSS
0%
Percentile
6.0
In the wild
Unconfirmed
What it is

⚡ A local attacker can exploit a sneaky DLL hijacking flaw in Vivado, opening the door to privilege escalation faster than you can say 'security update'! 🔥 Think of it like a construction site where an unauthorized worker sneaks in and replaces the blueprints, leading the whole team to build something totally different — a recipe for disaster! If exploited, this vulnerability could allow an attacker to escalate their privileges and execute arbitrary code, potentially gaining full control over the system. Imagine the chaos if someone could hijack your plans and make unauthorized changes — it could lead to data breaches or even system takeover!

Put simply

Think of it like a construction site where an unauthorized worker sneaks in and replaces the blueprints, leading the whole team to build something totally different — a recipe for disaster! This DLL hijacking vulnerability occurs when Vivado incorrectly loads the dynamic link library files, allowing an attacker with local access to substitute malicious DLLs for legitimate ones, leading to unauthorized code execution.

What to do

If exploited, this vulnerability could allow an attacker to escalate their privileges and execute arbitrary code, potentially gaining full control over the system. Imagine the chaos if someone could hijack your plans and make unauthorized changes — it could lead to data breaches or even system takeover! To protect against this vulnerability, ensure that you update Vivado to the latest version as soon as it’s available. Additionally, audit your systems to prevent unauthorized access and review your DLL management practices. Stay vigilant! You've got this! Follow these steps and you'll be well on your way to securing your environment like a pro. 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.0th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2026-02-11T14:43Z
EPSS history
Timeline
  • 11 FEB 14:43Z
    A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary code execution
    cvelistv5